Vulnerabilidades em microsoft
10.829 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2023-36030MEDIUMMicrosoft Dynamics 365 Sales Spoofing VulnerabilityEPSS 0.9%CVE-2021-34462HIGHWindows AppX Deployment Extensions Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-16998HIGHDirectX Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-26803HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-26798HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-21317MEDIUMWindows Kernel Memory Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-31937HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-21323MEDIUMWindows Kernel Memory Information Disclosure VulnerabilityEPSS 0.9%CVE-2022-38005HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-0680—An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowEPSS 0.8%CVE-2024-21384HIGHMicrosoft Office OneNote Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-0657—An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aEPSS 0.8%CVE-2020-0613—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%CVE-2020-1264—An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaEPSS 0.8%CVE-2020-0743—An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecEPSS 0.8%CVE-2020-0742—An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecEPSS 0.8%CVE-2020-0727—An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations,EPSS 0.8%CVE-2020-0740—An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecEPSS 0.8%CVE-2020-0741—An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecEPSS 0.8%CVE-2020-0666—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%