Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5260 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2993 Windows 11 Version 24H2 2879 Windows 11 24h2 2847 Windows 11 Version 25H2 2831 Windows Server 2022 2820 Windows 11 25h2 2799 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2662 Windows 10 1809 2615 Windows 10 Version 1809 2595 Windows 10 Version 21H2 2572 Windows 11 version 26H1 2561 Windows 10 Version 22H2 2555 Windows 10 21h2 2542 Windows 10 22h2 2528 Windows 11 26h1 2507 Windows 11 version 23H2 2389 Windows 11 23h2 2355 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2239 Windows 10 1607 2208 Windows 10 Version 1607 2177 Windows Server 2012 1885 Windows Server 2012 R2 1813 Windows Server 2012 R2 (Server Core installation) 1804 Windows Server 2012 (Server Core installation) 1699 Windows 11 Version 26H2 1007 Windows 11 26h2 971 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 556 Microsoft Office LTSC 2021 553 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 454 Microsoft Office LTSC for Mac 2024 453 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-57083 Média · 5.5 CWE-908 14/07/2026

Windows Media Photo Codec Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.

CVE-2026-56650 Alta · 7.8 CWE-122 14/07/2026

Windows Network File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-56649 Alta · 8.1 CWE-362 14/07/2026

Windows Network File System Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2026-56648 Alta · 7.5 CWE-367 14/07/2026

Windows NFS Server Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.

CVE-2026-56647 Alta · 8.8 CWE-190 14/07/2026

Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

CVE-2026-56644 Alta · 7.8 CWE-416 14/07/2026

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-56643 Alta · 7.8 CWE-416 14/07/2026

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-56642 Alta · 8.8 CWE-121 14/07/2026

Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.

CVE-2026-56197 Alta · 8.8 CWE-77 14/07/2026

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

CVE-2026-56196 Alta · 8.8 CWE-23 14/07/2026

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

CVE-2026-56195 Média · 5.5 CWE-125 14/07/2026

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-56194 Alta · 8.8 CWE-122 14/07/2026

Windows NFS Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.

CVE-2026-56192 Média · 5.5 CWE-125 14/07/2026

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-56190 Crítica · 9.8 CWE-908 14/07/2026

Remote Desktop Protocol Remote Code Execution Vulnerability

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

CVE-2026-56189 Alta · 8.4 CWE-122 14/07/2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

CVE-2026-56188 Alta · 8.1 CWE-362 14/07/2026

Windows Server Network driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

CVE-2026-56187 Alta · 7.8 CWE-416 14/07/2026

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-56186 Média · 6.5 CWE-125 14/07/2026

Windows Secure Channel Information Disclosure Vulnerability

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.

CVE-2026-56184 Média · 5.5 CWE-200 14/07/2026

Win32k Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-56183 Alta · 7.0 CWE-416 14/07/2026

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-56182 Alta · 7.8 CWE-122 14/07/2026

Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-56181 Alta · 8.3 CWE-346 14/07/2026

Windows Network Address Translation (NAT) Spoofing Vulnerability

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-56178 Alta · 7.0 CWE-367 14/07/2026

Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

CVE-2026-56176 Alta · 7.8 CWE-125 14/07/2026

Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-56175 Alta · 7.8 CWE-122 14/07/2026

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.