Vulnerabilidades em microsoft

9.312 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-38262HIGHWindows Remote Desktop Licensing Service Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-21349MEDIUMWindows Remote Desktop Configuration Service Tampering VulnerabilityEPSS 1.1%CVE-2023-36047HIGHWindows Authentication Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2023-21555HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-24893HIGHVisual Studio Code Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-21679HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2022-33632MEDIUMMicrosoft Office Security Feature Bypass VulnerabilityEPSS 1.1%CVE-2025-49759HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2023-21699MEDIUMWindows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-21546HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-56186HIGHWindows Secure Channel Information Disclosure VulnerabilityEPSS 1.1%CVE-2025-59499HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2026-21256HIGHGitHub Copilot and Visual Studio Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-26646HIGH.NET, Visual Studio, and Build Tools for Visual Studio Spoofing VulnerabilityEPSS 1.1%CVE-2026-44815CRITICALDHCP Client Service Remote Code Execution VulnerabilityEPSS 1.1%CVE-2019-1167—A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC eEPSS 1.1%CVE-2023-21783HIGH3D Builder Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-57108HIGH.NET Denial of Service VulnerabilityEPSS 1.1%CVE-2019-1278—An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of PrivileEPSS 1.1%CVE-2026-50647HIGHActive Directory Federation Server Denial of Service VulnerabilityEPSS 1.1%