Vulnerabilidades em microsoft

10.829 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-9611HIGHMicrosoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header ValidationEPSS 1.2%CVE-2021-1663MEDIUMWindows Projected File System FS Filter Driver Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-1670MEDIUMWindows Projected File System FS Filter Driver Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-1637MEDIUMWindows DNS Query Information Disclosure VulnerabilityEPSS 1.2%CVE-2020-1038MEDIUMWindows Routing Utilities Denial of ServiceEPSS 1.2%CVE-2026-26127HIGH.NET Denial of Service VulnerabilityEPSS 1.2%CVE-2023-21720MEDIUMMicrosoft Edge (Chromium-based) Tampering VulnerabilityEPSS 1.2%CVE-2021-34532MEDIUMASP.NET Core and Visual Studio Information Disclosure VulnerabilityEPSS 1.2%CVE-2023-35333HIGHMediaWiki PandocUpload Extension Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-17134HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-49076HIGHWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2025-55225MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2020-0814—An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioEPSS 1.2%CVE-2026-105795LOWKiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsEPSS 1.2%CVE-2025-26668HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-29140MEDIUMWindows Print Spooler Information Disclosure VulnerabilityEPSS 1.2%CVE-2019-1394—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%CVE-2025-50156MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2019-1396—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%CVE-2019-1395—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%