Vulnerabilidades em microsoft

9.312 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2024-21374MEDIUMMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.0%CVE-2022-21964MEDIUMRemote Desktop Licensing Diagnoser Information Disclosure VulnerabilityEPSS 1.0%CVE-2022-33635HIGHWindows GDI+ Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-21778HIGHMicrosoft Dynamics Unified Service Desk Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36589HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36592HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36573HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-41116MEDIUMWindows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityEPSS 1.0%CVE-2023-36572HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36570HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-41090MEDIUMWindows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityEPSS 1.0%CVE-2023-36571HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36575HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2019-1168HIGHMicrosoft Windows p2pimsvc Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2021-43221MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2020-17074HIGHWindows Update Orchestrator Service Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2023-36574HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2020-0695—A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft EPSS 1.0%CVE-2023-36598HIGHMicrosoft WDAC ODBC Driver Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-59284LOWWindows NTLM Spoofing VulnerabilityEPSS 1.0%