Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5260 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2993 Windows 11 Version 24H2 2879 Windows 11 24h2 2847 Windows 11 Version 25H2 2831 Windows Server 2022 2820 Windows 11 25h2 2799 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2662 Windows 10 1809 2615 Windows 10 Version 1809 2595 Windows 10 Version 21H2 2572 Windows 11 version 26H1 2561 Windows 10 Version 22H2 2555 Windows 10 21h2 2542 Windows 10 22h2 2528 Windows 11 26h1 2507 Windows 11 version 23H2 2389 Windows 11 23h2 2355 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2239 Windows 10 1607 2208 Windows 10 Version 1607 2177 Windows Server 2012 1885 Windows Server 2012 R2 1813 Windows Server 2012 R2 (Server Core installation) 1804 Windows Server 2012 (Server Core installation) 1699 Windows 11 Version 26H2 1007 Windows 11 26h2 971 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 556 Microsoft Office LTSC 2021 553 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 454 Microsoft Office LTSC for Mac 2024 453 Microsoft Office 2019 386

Somente exploradas (KEV) →

CVE-2026-56173 Alta · 7.0 CWE-416 14/07/2026

Windows WebView Elevation of Privilege Vulnerability

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.

CVE-2026-56168 Média · 6.5 CWE-476 14/07/2026

Windows SMB Server Denial of Service Vulnerability

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-56159 Crítica · 9.8 CWE-122 14/07/2026

DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-56157 Média · 5.4 CWE-284 14/07/2026

Microsoft SharePoint Server Spoofing Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-56156 Alta · 7.8 CWE-122 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55949 Alta · 7.8 CWE-908 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55947 Alta · 7.8 CWE-122 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55944 Crítica · 9.8 CWE-502 14/07/2026

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

CVE-2026-55898 Alta · 7.1 CWE-125 14/07/2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-55145 Alta · 7.1 CWE-77 14/07/2026

Outlook Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

CVE-2026-55142 Média · 5.5 CWE-197 14/07/2026

Microsoft Word Information Disclosure Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55141 Alta · 7.8 CWE-121 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55140 Alta · 7.8 CWE-122 14/07/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-55139 Baixa · 3.3 CWE-125 14/07/2026

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55138 Média · 5.5 CWE-822 14/07/2026

Microsoft Excel Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-55137 Alta · 7.8 CWE-122 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55136 Alta · 7.8 CWE-822 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55135 Média · 5.4 CWE-79 14/07/2026

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-55134 Alta · 7.8 CWE-121 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55133 Alta · 7.8 CWE-122 14/07/2026

Microsoft OneNote Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.

CVE-2026-55132 Alta · 7.8 CWE-415 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55131 Alta · 7.8 CWE-122 14/07/2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55130 Alta · 7.8 CWE-787 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55129 Alta · 7.8 CWE-122 14/07/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-55128 Alta · 7.8 CWE-416 14/07/2026

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.