Vulnerabilidades em microsoft
9.364 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2018-0986—A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, lEPSS 63.5%CVE-2021-27083HIGHRemote Development Extension for Visual Studio Code Remote Code Execution VulnerabilityEPSS 63.4%CVE-2018-8476—A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "WindowsEPSS 63.3%CVE-2026-45498MEDIUMMicrosoft Defender Denial of Service VulnerabilityEPSS 63.1%KEVCVE-2021-28472HIGHVisual Studio Code Maven for Java Extension Remote Code Execution VulnerabilityEPSS 63.0%CVE-2019-0698—A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, akaEPSS 62.8%CVE-2024-26212HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 62.6%CVE-2018-8617—A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CEPSS 62.5%CVE-2024-43642HIGHWindows SMB Denial of Service VulnerabilityEPSS 62.3%CVE-2018-8384—A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CEPSS 62.1%CVE-2023-21529HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 62.1%KEVCVE-2021-28325MEDIUMWindows SMB Information Disclosure VulnerabilityEPSS 62.1%CVE-2022-41076HIGHPowerShell Remote Code Execution VulnerabilityEPSS 61.6%CVE-2021-27084HIGHVisual Studio Code Java Extension Pack Remote Code Execution VulnerabilityEPSS 61.4%CVE-2019-1252—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 61.3%CVE-2025-29971HIGHWeb Threat Defense (WTD.sys) Denial of Service VulnerabilityEPSS 61.1%CVE-2024-43468CRITICALMicrosoft Configuration Manager Remote Code Execution VulnerabilityEPSS 61.1%KEVCVE-2024-21338HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 59.8%KEVCVE-2020-1300—A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an EPSS 59.5%CVE-2021-33742HIGHWindows MSHTML Platform Remote Code Execution VulnerabilityEPSS 59.1%KEV