Vulnerabilidades em microsoft

12.270 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2026-21235HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-24466MEDIUMWindows Hyper-V Security Feature Bypass VulnerabilityEPSS 0.7%CVE-2022-21961MEDIUMWindows Resilient File System (ReFS) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-21892MEDIUMWindows Resilient File System (ReFS) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-21960MEDIUMWindows Resilient File System (ReFS) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-21959MEDIUMWindows Resilient File System (ReFS) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-21958MEDIUMWindows Resilient File System (ReFS) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-23653MEDIUMGitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityEPSS 0.7%CVE-2020-1353—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 0.7%CVE-2020-1437—An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, akaEPSS 0.7%CVE-2020-1360—An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile SerEPSS 0.7%CVE-2020-1368—An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'WinEPSS 0.7%CVE-2020-1385—An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows CredentEPSS 0.7%CVE-2020-1399—An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationEPSS 0.7%CVE-2026-108131HIGHActive Directory Federation Services (AD FS) Spoofing VulnerabilityEPSS 0.7%CVE-2024-20699MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 0.7%CVE-2026-20834MEDIUMWindows Spoofing VulnerabilityEPSS 0.7%CVE-2020-1085—An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowEPSS 0.7%CVE-2020-1356—An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI EPSS 0.7%CVE-2020-1428—An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoEPSS 0.7%