Vulnerabilidades em microsoft

12.270 resultados
Análise Vexday

Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.

CVE-2025-54896HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-26631HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-28907HIGHMicrosoft Brokering File System Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-54900HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54902HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-50159HIGHRemote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-54904HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54903HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54898HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-55035MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-66314MEDIUMMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-20953HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-72980MEDIUMWindows Hello Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2023-28249MEDIUMWindows Boot Manager Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2025-26679HIGHRPC Endpoint Mapper Service Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-26681MEDIUMWin32k Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-43450HIGHWindows DNS Spoofing VulnerabilityEPSS 0.6%CVE-2025-58724HIGHArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-21227HIGHAzure Logic Apps Elevation of Privilege VulnerabilityEPSS 0.6%