Vulnerabilidades em microsoft
10.810 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2019-0584—A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnEPSS 13.6%CVE-2018-8300—A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paEPSS 13.6%CVE-2022-37957HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 13.6%CVE-2020-0708—A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an atEPSS 13.5%CVE-2022-22715HIGHNamed Pipe File System Elevation of Privilege VulnerabilityEPSS 13.5%CVE-2021-31179HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 13.5%CVE-2018-8529—A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication betwEPSS 13.5%CVE-2020-16899HIGHWindows TCP/IP Denial of Service VulnerabilityEPSS 13.5%CVE-2021-31939HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 13.3%CVE-2018-8569—A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop EPSS 13.3%CVE-2020-0970—A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginEPSS 13.3%CVE-2020-0827—A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginEPSS 13.3%CVE-2020-0825—A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginEPSS 13.3%CVE-2020-0969—A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-bEPSS 13.3%CVE-2019-1406—A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnEPSS 13.3%CVE-2020-0662—A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution VulnerabiEPSS 13.3%CVE-2018-8624—A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CEPSS 13.2%CVE-2020-0971—A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paEPSS 13.2%CVE-2019-1110—A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'EPSS 13.2%CVE-2019-1111—A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'EPSS 13.2%