Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5241 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2997 Windows 11 Version 24H2 2883 Windows 11 Version 25H2 2835 Windows Server 2022 2820 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2666 Windows 10 Version 1809 2600 Windows 10 Version 21H2 2576 Windows 11 version 26H1 2565 Windows 10 Version 22H2 2559 Windows 11 version 23H2 2391 Windows 11 24h2 2387 Windows 11 25h2 2339 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2243 Windows 10 1809 2211 Windows 10 Version 1607 2181 Windows 10 21h2 2132 Windows 10 22h2 2118 Windows 11 26h1 2050 Windows 11 23h2 1917 Windows 10 1607 1873 Windows Server 2012 1869 Windows Server 2012 R2 1817 Windows Server 2012 R2 (Server Core installation) 1808 Windows Server 2012 (Server Core installation) 1703 Windows 11 Version 26H2 1007 Microsoft 365 Apps for Enterprise 577 365 Apps 575 Microsoft Office LTSC 2024 557 Microsoft Office LTSC 2021 554 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Windows 11 26h2 519 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 451 Microsoft Office LTSC for Mac 2024 450 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-62837 Média · 6.5 CWE-23 11/08/2026

Microsoft SharePoint Server Information Disclosure Vulnerability

Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-62832 Alta · 7.8 CWE-59 11/08/2026

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62829 Média · 5.4 CWE-79 11/08/2026

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-62827 Alta · 8.8 CWE-287 11/08/2026

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-62823 Alta · 8.8 CWE-122 11/08/2026

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62822 Alta · 8.8 CWE-122 11/08/2026

Windows GDI+ Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2026-62820 Alta · 8.1 CWE-362 11/08/2026

Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-62824 Alta · 8.8 CWE-121 11/08/2026

Remote Desktop Client Remote Code Execution Vulnerability

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-62819 Alta · 8.1 CWE-416 11/08/2026

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-62818 Alta · 8.8 CWE-416 11/08/2026

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.

CVE-2026-62817 Alta · 8.8 CWE-787 11/08/2026

Windows DNS Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62816 Alta · 8.8 CWE-122 11/08/2026

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62815 Crítica · 9.8 CWE-416 11/08/2026

Microsoft QUIC Remote Code Execution Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-62814 Média · 6.5 CWE-125 11/08/2026

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2026-62812 Alta · 7.8 CWE-59 11/08/2026

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62811 Alta · 7.8 CWE-122 11/08/2026

Windows HTTP.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62807 Alta · 7.8 CWE-59 11/08/2026

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62803 Alta · 7.8 CWE-59 11/08/2026

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62800 Alta · 8.8 CWE-122 11/08/2026

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62799 Alta · 7.8 CWE-122 11/08/2026

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62798 Média · 5.5 CWE-822 11/08/2026

Win32k Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62797 Alta · 7.8 CWE-122 11/08/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62796 Média · 5.5 CWE-125 11/08/2026

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62795 Alta · 8.8 CWE-416 11/08/2026

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62793 Média · 5.5 CWE-126 11/08/2026

Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.