Vulnerabilidades em microsoft
10.829 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-0056HIGHMicrosoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2018-8224—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel ElevaEPSS 1.2%CVE-2026-49336MEDIUM@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapterEPSS 1.2%CVE-2018-8169—An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memEPSS 1.2%CVE-2018-8119—A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQEPSS 1.2%CVE-2024-30074HIGHWindows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-33130HIGHMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 1.2%CVE-2018-8329—An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "LinuxEPSS 1.2%CVE-2019-1342—An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error REPSS 1.2%CVE-2026-21256HIGHGitHub Copilot and Visual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2021-26431HIGHWindows Recovery Environment Agent Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2026-84001HIGHWindows Key Distribution Center Denial of Service VulnerabilityEPSS 1.2%CVE-2026-49787HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.2%CVE-2026-50506HIGHOData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityEPSS 1.2%CVE-2026-50411HIGHWindows Active Directory Federation Services Denial of Service VulnerabilityEPSS 1.2%CVE-2026-56170HIGHASP.NET Core Denial of Service VulnerabilityEPSS 1.2%CVE-2026-57099HIGHASP.NET Core Denial of Service VulnerabilityEPSS 1.2%CVE-2018-8219—An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "HEPSS 1.2%CVE-2026-59132HIGHWindows TCP/IP Denial of Service VulnerabilityEPSS 1.2%CVE-2026-49788HIGHHTTP/2 Denial of Service VulnerabilityEPSS 1.2%