Vulnerabilidades em microsoft

9.312 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2023-36578HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2021-31169HIGHWindows Container Manager Service Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-1549HIGHWindows CDP User Components Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-16916HIGHWindows COM Server Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-1486HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-17024HIGHWindows Client Side Rendering Print Provider Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-17041HIGHWindows Print Configuration Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-16851HIGHOneDrive for Windows Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2024-43595MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-20849HIGHWindows Kerberos Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2019-0659—An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service EleEPSS 1.0%CVE-2024-43596MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-50171CRITICALRemote Desktop Spoofing VulnerabilityEPSS 1.0%CVE-2023-28283HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-48567CRITICALAzure HorizonDB Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2020-0621—A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update, aka 'Windows SecuEPSS 1.0%CVE-2025-62567MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 1.0%CVE-2021-27094MEDIUMWindows Early Launch Antimalware Driver Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-49038CRITICALMicrosoft Copilot Studio Elevation Of Privilege VulnerabilityEPSS 1.0%CVE-2024-21374MEDIUMMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.0%