Vulnerabilidades em microsoft

10.829 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-28271MEDIUMWindows Kernel Memory Information Disclosure VulnerabilityEPSS 1.2%CVE-2022-23269MEDIUMMicrosoft Dynamics GP Spoofing VulnerabilityEPSS 1.2%CVE-2023-21539HIGHWindows Authentication Remote Code Execution VulnerabilityEPSS 1.2%CVE-2024-28899HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2022-41066MEDIUMMicrosoft Dynamics Business Central Information Disclosure VulnerabilityEPSS 1.2%CVE-2022-44688MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 1.2%CVE-2022-41089HIGH.NET Framework Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-36037HIGHMicrosoft Excel Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2024-38263HIGHWindows Remote Desktop Licensing Service Remote Code Execution VulnerabilityEPSS 1.2%CVE-2024-43604MEDIUMOutlook for Android Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2025-47966CRITICALPower Automate Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2022-41118HIGHWindows Scripting Languages Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-1033MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 1.2%CVE-2024-21389HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 1.2%CVE-2024-21393HIGHMicrosoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityEPSS 1.2%CVE-2022-44670HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2018-8117—A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryptiEPSS 1.2%CVE-2021-26889HIGHWindows Update Stack Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-21396HIGHDynamics 365 Sales Spoofing VulnerabilityEPSS 1.2%CVE-2025-53797MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%