Vulnerabilidades em microsoft
10.829 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2024-49073MEDIUMWindows Mobile Broadband Driver Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-29338MEDIUMVisual Studio Code Spoofing VulnerabilityEPSS 0.9%CVE-2022-35779HIGHAzure RTOS GUIX Studio Remote Code Execution VulnerabilityEPSS 0.9%CVE-2019-1162HIGHWindows ALPC Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-37978HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2021-1731MEDIUMPFX Encryption Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2023-28238HIGHWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-69304MEDIUMASP.NET Core Denial of Service VulnerabilityEPSS 0.9%CVE-2020-0841—An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulEPSS 0.9%CVE-2021-38636MEDIUMWindows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-0898—An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiEPSS 0.9%CVE-2021-38637MEDIUMWindows Storage Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-38635MEDIUMWindows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-1197—An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error REPSS 0.9%CVE-2021-36969MEDIUMWindows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-0819—An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows DeviceEPSS 0.9%CVE-2020-1254—An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authEPSS 0.9%CVE-2026-45489MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.9%CVE-2020-0916—An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WEPSS 0.9%CVE-2026-57993HIGHMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 0.9%