Vulnerabilidades em microsoft

10.829 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2020-1519HIGHWindows UPnP Device Host Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1545HIGHWindows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1516HIGHWindows Work Folders Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1518HIGHWindows File Server Resource Management Service Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1251—An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akEPSS 0.9%CVE-2020-1533HIGHWindows WalletService Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1544HIGHWindows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-1515HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-0989MEDIUMWindows Mobile Device Management Diagnostics Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-62839MEDIUMMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 0.9%CVE-2026-58639MEDIUMMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 0.9%CVE-2026-57205MEDIUMSimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpointsEPSS 0.9%CVE-2026-55051MEDIUMMicrosoft SharePoint Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2022-35822HIGHWindows Defender Credential Guard Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2021-41376LOWAzure Sphere Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-0858—An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit tEPSS 0.9%CVE-2021-33767HIGHOpen Enclave SDK Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-16892HIGHWindows Image Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-20927MEDIUMWindows SMB Server Denial of Service VulnerabilityEPSS 0.9%CVE-2025-49752CRITICALAzure Bastion Elevation of Privilege VulnerabilityEPSS 0.9%