Vulnerabilidades de Microsoft

CVEs publicadas que afetam produtos de Microsoft: 5262 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001 Windows Server 2025 (Server Core installation) 2987 Windows 11 Version 24H2 2873 Windows 11 24h2 2856 Windows 11 Version 25H2 2825 Windows Server 2022 2820 Windows 11 25h2 2808 Windows Server 2019 2708 Windows Server 2019 (Server Core installation) 2657 Windows 10 1809 2624 Windows 10 Version 1809 2590 Windows 10 Version 21H2 2567 Windows 11 version 26H1 2555 Windows 10 21h2 2551 Windows 10 Version 22H2 2550 Windows 10 22h2 2537 Windows 11 26h1 2516 Windows 11 version 23H2 2383 Windows 11 23h2 2364 Windows Server 2016 2297 Windows Server 2016 (Server Core installation) 2233 Windows 10 1607 2214 Windows 10 Version 1607 2171 Windows Server 2012 1885 Windows Server 2012 R2 1807 Windows Server 2012 R2 (Server Core installation) 1798 Windows Server 2012 (Server Core installation) 1693 Windows 11 Version 26H2 1007 Windows 11 26h2 980 Microsoft 365 Apps for Enterprise 576 365 Apps 575 Microsoft Office LTSC 2024 554 Microsoft Office LTSC 2021 551 Windows Server 2022 23h2 544 Windows Server 2022, 23H2 Edition (Server Core installation) 543 Office 2021 465 Office 2024 465 Microsoft Office LTSC for Mac 2021 462 Microsoft Office LTSC for Mac 2024 462 Microsoft Office 365 for Mac 389

Somente exploradas (KEV) →

CVE-2025-24993 Alta · 7.8 KEV Alta · 53 CWE-122 11/03/2025

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2025-24984 Média · 4.6 KEV Alta · 50 CWE-532 11/03/2025

Microsoft Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24985 Alta · 7.8 KEV Alta · 61 Exploit público CWE-122 11/03/2025

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-24983 Alta · 7.0 KEV Alta · 53 CWE-416 11/03/2025

Microsoft Windows Win32k Use-After-Free Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2025-24054 Média · 5.4 KEV Alta · 67 Exploit público CWE-73 11/03/2025

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-24989 Crítica · 9.8 KEV Alta · 56 CWE-284 19/02/2025

Microsoft Power Pages Improper Access Control Vulnerability

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.

CVE-2025-21418 Alta · 7.8 KEV Alta · 53 CWE-122 11/02/2025

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-21391 Alta · 7.1 KEV Alta · 53 CWE-59 11/02/2025

Microsoft Windows Storage Link Following Vulnerability

Windows Storage Elevation of Privilege Vulnerability

CVE-2025-21333 Alta · 7.8 KEV Alta · 69 Exploit público CWE-122 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334 Alta · 7.8 KEV Alta · 52 CWE-416 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21335 Alta · 7.8 KEV Alta · 52 CWE-416 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-49138 Alta · 7.8 KEV Urgente · 70 Exploit público CWE-122 11/12/2024

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-49035 Crítica · 9.8 KEV Alta · 56 CWE-269 26/11/2024

Microsoft Partner Center Improper Access Control Vulnerability

An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

CVE-2024-49039 Alta · 8.8 KEV Urgente · 71 Exploit público Ransomware CWE-287 12/11/2024

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-43451 Média · 6.5 KEV Alta · 59 Exploit público CWE-73 12/11/2024

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2024-43572 Alta · 7.8 KEV Alta · 56 CWE-707 08/10/2024

Microsoft Windows Management Console Remote Code Execution Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-43573 Alta · 8.1 KEV Alta · 56 CWE-79 08/10/2024

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-43468 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-89 08/10/2024

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft Configuration Manager Remote Code Execution Vulnerability

CVE-2024-43461 Alta · 8.8 KEV Alta · 56 CWE-451 10/09/2024

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-38226 Alta · 7.3 KEV Alta · 54 CWE-693 10/09/2024

Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

CVE-2024-38217 Média · 5.4 KEV Alta · 52 CWE-693 10/09/2024

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38014 Alta · 7.8 KEV Alta · 55 CWE-269 10/09/2024

Microsoft Windows Installer Improper Privilege Management Vulnerability

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-7971 Crítica · 9.6 KEV Alta · 66 Exploit público CWE-843 21/08/2024

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-7965 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 21/08/2024

Google Chromium V8 Inappropriate Implementation Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-38213 Média · 6.5 KEV Alta · 52 CWE-693 13/08/2024

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability