Vulnerabilidades em microsoft

10.829 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-54096MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-54095MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53796MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53798MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53797MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53806MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-48799HIGHWindows Update Service Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2023-35356HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-26199HIGHMicrosoft Office Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2025-53727HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-36963HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2022-30164HIGHKerberos AppContainer Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2022-41120HIGHMicrosoft Windows System Monitor (Sysmon) Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-1677MEDIUMAzure Active Directory Pod Identity Spoofing VulnerabilityEPSS 1.2%CVE-2020-1475HIGHWindows Server Resource Management Service Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2025-29969HIGHMS-EVEN RPC Remote Code Execution VulnerabilityEPSS 1.2%CVE-2019-0976—A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contentEPSS 1.2%CVE-2019-0656—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 1.1%CVE-2025-21349MEDIUMWindows Remote Desktop Configuration Service Tampering VulnerabilityEPSS 1.1%CVE-2023-21686HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.1%