Vulnerabilidades de Microsoft
CVEs publicadas que afetam produtos de Microsoft: 5245 registro(s), com severidade, exploração e correções.
Windows Server 2025 3001Windows Server 2025 (Server Core installation) 2993Windows 11 Version 24H2 2879Windows 11 Version 25H2 2831Windows Server 2022 2820Windows Server 2019 2708Windows Server 2019 (Server Core installation) 2662Windows 11 24h2 2646Windows 11 25h2 2598Windows 10 Version 1809 2595Windows 10 Version 21H2 2572Windows 11 version 26H1 2561Windows 10 Version 22H2 2555Windows 10 1809 2438Windows 11 version 23H2 2389Windows 10 21h2 2362Windows 10 22h2 2348Windows 11 26h1 2306Windows Server 2016 2297Windows Server 2016 (Server Core installation) 2239Windows 10 Version 1607 2177Windows 11 23h2 2165Windows 10 1607 2069Windows Server 2012 1878Windows Server 2012 R2 1813Windows Server 2012 R2 (Server Core installation) 1804Windows Server 2012 (Server Core installation) 1699Windows 11 Version 26H2 1007Windows 11 26h2 771Microsoft 365 Apps for Enterprise 576365 Apps 575Microsoft Office LTSC 2024 556Microsoft Office LTSC 2021 553Windows Server 2022 23h2 544Windows Server 2022, 23H2 Edition (Server Core installation) 543Office 2021 465Office 2024 465Microsoft Office LTSC for Mac 2021 454Microsoft Office LTSC for Mac 2024 453Microsoft Office 2019 386
CVE-2026-61348
Alta · 7.0
CWE-416 11/08/2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-61347
Média · 5.5
CWE-126 11/08/2026
Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-61346
Alta · 7.0
CWE-416 11/08/2026
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61345
Média · 6.5
CWE-476 11/08/2026
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
CVE-2026-59138
Média · 6.5
CWE-476 11/08/2026
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
CVE-2026-59137
Média · 5.5
CWE-908 11/08/2026
Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-59136
Média · 5.5
CWE-908 11/08/2026
Microsoft COM for Windows Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
CVE-2026-59135
Média · 5.5
CWE-1390 11/08/2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-59134
Alta · 8.1
CWE-20 11/08/2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-59133
Alta · 8.8
CWE-250 11/08/2026
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
CVE-2026-59132
Alta · 7.5
CWE-476 11/08/2026
Windows TCP/IP Denial of Service Vulnerability
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-59131
Média · 5.6
CWE-1303 11/08/2026
AMD Zen Information Disclosure Vulnerability
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-59130
Média · 5.6
CWE-1303 11/08/2026
AMD Zen Information Disclosure Vulnerability
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-59128
Média · 5.5
CWE-125 11/08/2026
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-59127
Alta · 7.8
CWE-190 11/08/2026
Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-59126
Alta · 7.0
CWE-362 11/08/2026
Windows Event Logging Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59125
Alta · 7.0
CWE-416 11/08/2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-59124
Crítica · 9.8
CWE-502 11/08/2026
Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
CVE-2026-59122
Alta · 7.0
CWE-362 11/08/2026
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59119
Alta · 7.3
CWE-276 11/08/2026
PowerShell Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2026-59113
Alta · 8.8
CWE-862 11/08/2026
Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-58651
Alta · 7.8
CWE-122 11/08/2026
Microsoft Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-58650
Alta · 7.8
CWE-639 11/08/2026
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-58641
Alta · 7.8
CWE-190 11/08/2026
.NET Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-58639
Média · 6.5
CWE-918 11/08/2026
Microsoft SharePoint Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.