Vulnerabilidades em microsoft
12.270 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2026-45455LOWMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-59113HIGHVisual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-27483HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-78462HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-47645HIGHMicrosoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-21193MEDIUMActive Directory Federation Server Spoofing VulnerabilityEPSS 0.8%CVE-2026-83891HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-97769HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-20682HIGHWindows Cryptographic Services Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-21309HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0631—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%CVE-2021-1727HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0867—An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsEPSS 0.8%CVE-2024-38034HIGHWindows Filtering Platform Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0844—An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaEPSS 0.8%CVE-2024-38119HIGHWindows Network Address Translation (NAT) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-29125HIGHWindows Push Notifications Apps Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-62801MEDIUMMicrosoft PowerShell Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2020-1279—An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka 'EPSS 0.8%CVE-2020-0868—An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsEPSS 0.8%