Vulnerabilidades em microsoft
12.276 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2026-45593HIGHWindows SDK Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-45592HIGHWindows Internet (wininet.dll) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42983HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-83676HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42910HIGHWindows Hotpatch Monitoring Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-32204HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42891MEDIUMMicrosoft Edge (Chromium-based) for Android Spoofing VulnerabilityEPSS 0.3%CVE-2025-59033HIGHThe Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only tEPSS 0.3%CVE-2025-48803MEDIUMWindows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-83724HIGHWindows Management Instrumentation Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-42896HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-48811MEDIUMWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-69379HIGHWindows NTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-77897HIGHMicrosoft Power Automate Desktop Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-83999HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2023-21542HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-49690HIGHCapability Access Management Service (camsvc) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-83917HIGHWindows ALPC Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-53139HIGHWindows Hello Security Feature Bypass VulnerabilityEPSS 0.3%CVE-2026-35199MEDIUMSymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncationEPSS 0.3%