Vulnerabilidades em microsoft
10.810 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2020-16874HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 4.3%CVE-2024-30025HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2019-1155HIGHJet Database Engine Remote Code Execution VulnerabilityEPSS 4.3%CVE-2019-1487—An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under specEPSS 4.3%CVE-2020-1039HIGHJet Database Engine Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-17109HIGHHEVC Video Extensions Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-1561—Microsoft Graphics Components Remote Code Execution VulnerabilityEPSS 4.3%CVE-2024-30091HIGHWin32k Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2023-36400HIGHWindows HMAC Key Derivation Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2020-17061HIGHMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-1303MEDIUMWindows Runtime Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2019-1213CRITICALWindows DHCP Server Remote Code Execution VulnerabilityEPSS 4.2%CVE-2019-1109—A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office docuEPSS 4.2%CVE-2019-0796—An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows ElevationEPSS 4.2%CVE-2025-59199HIGHSoftware Protection Platform (SPP) Elevation of Privilege VulnerabilityEPSS 4.2%CVE-2018-0890—A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory SEPSS 4.2%CVE-2020-1462—An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for BusinEPSS 4.2%CVE-2020-17003HIGHBase3D Remote Code Execution VulnerabilityEPSS 4.2%CVE-2020-16967HIGHWindows Camera Codec Pack Remote Code Execution VulnerabilityEPSS 4.2%CVE-2020-1496—Microsoft Excel Remote Code Execution VulnerabilityEPSS 4.2%