Vulnerabilidades em microsoft
10.810 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2021-38655HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 6.3%CVE-2018-8579—An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure VulneEPSS 6.3%CVE-2024-43502HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 6.3%CVE-2020-1018—An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of aEPSS 6.3%CVE-2021-38659HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 6.3%CVE-2021-38654HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 6.3%CVE-2021-38653HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 6.3%CVE-2021-38658HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 6.3%CVE-2021-24066HIGHMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS 6.3%CVE-2021-27063HIGHWindows DNS Server Denial of Service VulnerabilityEPSS 6.3%CVE-2022-30160HIGHWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityEPSS 6.3%CVE-2020-0882—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 6.3%CVE-2020-0880—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 6.3%CVE-2018-8422—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows EPSS 6.3%CVE-2024-38014HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 6.3%KEVCVE-2020-1108—.NET Core & .NET Framework Denial of Service VulnerabilityEPSS 6.3%CVE-2018-8234—An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information DisEPSS 6.3%CVE-2023-35644HIGHWindows Sysmain Service Elevation of Privilege VulnerabilityEPSS 6.3%CVE-2018-0871—An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." EPSS 6.3%CVE-2022-22034HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 6.2%