Vulnerabilidades de Microsoft
CVEs publicadas que afetam produtos de Microsoft: 5260 registro(s), com severidade, exploração e correções.
Windows Server 2025 3001Windows Server 2025 (Server Core installation) 2993Windows 11 Version 24H2 2879Windows 11 24h2 2847Windows 11 Version 25H2 2831Windows Server 2022 2820Windows 11 25h2 2799Windows Server 2019 2708Windows Server 2019 (Server Core installation) 2662Windows 10 1809 2615Windows 10 Version 1809 2595Windows 10 Version 21H2 2572Windows 11 version 26H1 2561Windows 10 Version 22H2 2555Windows 10 21h2 2542Windows 10 22h2 2528Windows 11 26h1 2507Windows 11 version 23H2 2389Windows 11 23h2 2355Windows Server 2016 2297Windows Server 2016 (Server Core installation) 2239Windows 10 1607 2208Windows 10 Version 1607 2177Windows Server 2012 1885Windows Server 2012 R2 1813Windows Server 2012 R2 (Server Core installation) 1804Windows Server 2012 (Server Core installation) 1699Windows 11 Version 26H2 1007Windows 11 26h2 971Microsoft 365 Apps for Enterprise 576365 Apps 575Microsoft Office LTSC 2024 556Microsoft Office LTSC 2021 553Windows Server 2022 23h2 544Windows Server 2022, 23H2 Edition (Server Core installation) 543Office 2021 465Office 2024 465Microsoft Office LTSC for Mac 2021 454Microsoft Office LTSC for Mac 2024 453Microsoft Office 2019 386
CVE-2026-55041
Alta · 7.8
CWE-122 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55039
Alta · 7.8
CWE-122 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55038
Alta · 7.8
CWE-121 14/07/2026
Microsoft Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55040
Crítica · 9.1
KEV Urgente · 73 Exploit público CWE-1390 14/07/2026
Microsoft SharePoint Weak Authentication Vulnerability
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-55037
Alta · 7.8
CWE-122 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55036
Alta · 7.8
CWE-126 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55035
Baixa · 3.3
CWE-125 14/07/2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55034
Alta · 8.7
CWE-79 14/07/2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55033
Alta · 7.8
CWE-122 14/07/2026
Microsoft Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
Alta · 7.8
CWE-416 14/07/2026
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55031
Alta · 7.8
CWE-125 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55030
Média · 5.4
CWE-79 14/07/2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55029
Alta · 7.8
CWE-122 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55028
Média · 5.5
CWE-125 14/07/2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55027
Média · 5.5
CWE-125 14/07/2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55026
Média · 5.5
CWE-190 14/07/2026
Microsoft Office Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55025
Alta · 7.8
CWE-843 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55024
Alta · 7.8
CWE-843 14/07/2026
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55023
Média · 5.5
CWE-125 14/07/2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55022
Alta · 7.8
CWE-843 14/07/2026
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55021
Alta · 8.7
CWE-79 14/07/2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55020
Média · 5.4
CWE-79 14/07/2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55019
Média · 5.4
CWE-79 14/07/2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55018
Alta · 7.8
CWE-416 14/07/2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55017
Alta · 7.8
CWE-122 14/07/2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.