Vulnerabilidades em microsoft
10.810 resultadosAnálise Vexday
Microsoft apresenta 41 vulnerabilidades registradas, com 29 publicadas nos últimos 90 dias, indicando ritmo elevado de descobertas recentes. Oito vulnerabilidades críticas foram identificadas, predominantemente relacionadas a traversal de diretório (CWE-22), mas nenhuma está sob exploração ativa conhecida no momento. O volume recente de falhas requer atenção contínua em patching, especialmente considerando a superfície de ataque do ecossistema Microsoft.
CVE-2020-1498—Microsoft Excel Remote Code Execution VulnerabilityEPSS 3.9%CVE-2020-0645—A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server TamperingEPSS 3.9%CVE-2020-0856MEDIUMActive Directory Information Disclosure VulnerabilityEPSS 3.9%CVE-2021-26423HIGH.NET Core and Visual Studio Denial of Service VulnerabilityEPSS 3.9%CVE-2024-21426HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 3.9%CVE-2021-1643HIGHHEVC Video Extensions Remote Code Execution VulnerabilityEPSS 3.9%CVE-2022-21880HIGHWindows GDI+ Information Disclosure VulnerabilityEPSS 3.9%CVE-2020-1252HIGHWindows Remote Code Execution VulnerabilityEPSS 3.9%CVE-2020-17022HIGHMicrosoft Windows Codecs Library Remote Code Execution VulnerabilityEPSS 3.9%CVE-2019-1218—Outlook iOS Spoofing VulnerabilityEPSS 3.9%CVE-2021-41351MEDIUMMicrosoft Edge (Chrome based) Spoofing on IE ModeEPSS 3.9%CVE-2021-43224MEDIUMWindows Common Log File System Driver Information Disclosure VulnerabilityEPSS 3.9%CVE-2020-16957HIGHMicrosoft Office Access Connectivity Engine Remote Code Execution VulnerabilityEPSS 3.9%CVE-2020-1512HIGHWindows State Repository Service Information Disclosure VulnerabilityEPSS 3.9%CVE-2022-24507HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 3.9%CVE-2020-16918HIGHBase3D Remote Code Execution VulnerabilityEPSS 3.9%CVE-2020-1378HIGHWindows Registry Elevation of Privilege VulnerabilityEPSS 3.9%CVE-2019-0668—An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tEPSS 3.9%CVE-2019-0857—A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user proviEPSS 3.9%CVE-2019-0761—A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific UEPSS 3.9%