Vulnerabilidades de Microsoft
CVEs publicadas que afetam produtos de Microsoft: 5262 registro(s), com severidade, exploração e correções.
Windows Server 2025 3001Windows Server 2025 (Server Core installation) 2987Windows 11 Version 24H2 2873Windows 11 24h2 2856Windows 11 Version 25H2 2825Windows Server 2022 2820Windows 11 25h2 2808Windows Server 2019 2708Windows Server 2019 (Server Core installation) 2657Windows 10 1809 2624Windows 10 Version 1809 2590Windows 10 Version 21H2 2567Windows 11 version 26H1 2555Windows 10 21h2 2551Windows 10 Version 22H2 2550Windows 10 22h2 2537Windows 11 26h1 2516Windows 11 version 23H2 2383Windows 11 23h2 2364Windows Server 2016 2297Windows Server 2016 (Server Core installation) 2233Windows 10 1607 2214Windows 10 Version 1607 2171Windows Server 2012 1885Windows Server 2012 R2 1807Windows Server 2012 R2 (Server Core installation) 1798Windows Server 2012 (Server Core installation) 1693Windows 11 Version 26H2 1007Windows 11 26h2 980Microsoft 365 Apps for Enterprise 576365 Apps 575Microsoft Office LTSC 2024 554Microsoft Office LTSC 2021 551Windows Server 2022 23h2 544Windows Server 2022, 23H2 Edition (Server Core installation) 543Office 2021 465Office 2024 465Microsoft Office LTSC for Mac 2021 462Microsoft Office LTSC for Mac 2024 462Microsoft Office 365 for Mac 389
CVE-2023-36025
Alta · 8.8
KEV Alta · 62 Exploit público 14/11/2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-41763
Média · 5.3
KEV Alta · 60 Exploit público CWE-918 10/10/2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Skype for Business Elevation of Privilege Vulnerability
CVE-2023-36584
Média · 5.4
KEV Alta · 51 10/10/2023
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2023-36563
Média · 5.5
KEV Alta · 53 CWE-20 10/10/2023
Microsoft WordPad Information Disclosure Vulnerability
Microsoft WordPad Information Disclosure Vulnerability
CVE-2023-44487
Alta · 7.5
KEV Urgente · 73 Exploit público CWE-400 10/10/2023
HTTP/2 Rapid Reset: negação de serviço no protocolo
O protocolo HTTP/2 permite uma negação de serviço (consumo de recursos do servidor) porque o cancelamento de requisições pode reiniciar muitos streams rapidamente, conforme explorado na natureza entre agosto e outubro de 2023.
CVE-2023-5217
Alta · 8.8
KEV Alta · 62 Exploit público CWE-787 28/09/2023
Estouro de buffer no heap na codificação VP8 do libvpx no Google Chromium
Estouro de buffer no heap na codificação vp8 no libvpx do Google Chrome anterior à 117.0.5938.132 e libvpx 1.13.1 permitia que um atacante remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)
CVE-2023-36802
Alta · 7.8
KEV Alta · 62 Exploit público CWE-416 12/09/2023
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2023-36761
Média · 6.5
KEV Alta · 53 CWE-20 12/09/2023
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2023-4863
Alta · 8.8
KEV Alta · 62 Exploit público CWE-787 12/09/2023
Estouro de buffer baseado em heap no libwebp do Google Chromium
Estouro de buffer baseado em heap na libwebp no Google Chrome anterior a 116.0.5845.187 e libwebp 1.3.2 permitiu que um atacante remoto realizasse uma escrita fora dos limites de memória por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Crítica)
CVE-2023-4762
Alta · 8.8
KEV Alta · 62 Exploit público CWE-843 05/09/2023
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2023-38180
Alta · 7.5
KEV Alta · 58 CWE-400 08/08/2023
Negação de Serviço no Microsoft .NET e Visual Studio
Vulnerabilidade de negação de serviço no .NET e no Visual Studio
CVE-2023-36884
Alta · 7.5
KEV Urgente · 72 Exploit público Ransomware CWE-362 11/07/2023
Microsoft Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
CVE-2023-36874
Alta · 7.8
KEV Urgente · 74 Exploit público CWE-59 11/07/2023
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-35311
Alta · 8.8
KEV Alta · 56 CWE-367 11/07/2023
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-32049
Alta · 8.8
KEV Alta · 55 11/07/2023
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-32046
Alta · 7.8
KEV Alta · 55 11/07/2023
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-32028
Alta · 7.8
CWE-122 15/06/2023
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVE-2023-29360
Alta · 8.4
KEV Alta · 62 Exploit público CWE-822 13/06/2023
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2023-29357
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-303 13/06/2023
Microsoft SharePoint Server Privilege Escalation Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-29336
Alta · 7.8
KEV Urgente · 70 Exploit público CWE-416 09/05/2023
Microsoft Win32K Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2023-24955
Alta · 7.2
KEV Urgente · 84 Exploit público Ransomware CWE-94 09/05/2023
Microsoft SharePoint Server Code Injection Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-28252
Alta · 7.8
KEV Urgente · 84 Exploit público Ransomware CWE-787 11/04/2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-28229
Alta · 7.0
KEV Alta · 59 Exploit público CWE-591 11/04/2023
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-24880
Média · 4.4
KEV Alta · 63 Ransomware CWE-863 14/03/2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-23397
Crítica · 9.8
KEV Alta · 66 Exploit público CWE-294 14/03/2023
Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability