CVE Intelligence

Vulnerabilidades de Microsoft

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Microsoft: 5262 registro(s), com severidade, exploração e correções.

Windows Server 2025 3001Windows Server 2025 (Server Core installation) 2987Windows 11 Version 24H2 2873Windows 11 24h2 2856Windows 11 Version 25H2 2825Windows Server 2022 2820Windows 11 25h2 2808Windows Server 2019 2708Windows Server 2019 (Server Core installation) 2657Windows 10 1809 2624Windows 10 Version 1809 2590Windows 10 Version 21H2 2567Windows 11 version 26H1 2555Windows 10 21h2 2551Windows 10 Version 22H2 2550Windows 10 22h2 2537Windows 11 26h1 2516Windows 11 version 23H2 2383Windows 11 23h2 2364Windows Server 2016 2297Windows Server 2016 (Server Core installation) 2233Windows 10 1607 2214Windows 10 Version 1607 2171Windows Server 2012 1885Windows Server 2012 R2 1807Windows Server 2012 R2 (Server Core installation) 1798Windows Server 2012 (Server Core installation) 1693Windows 11 Version 26H2 1007Windows 11 26h2 980Microsoft 365 Apps for Enterprise 576365 Apps 575Microsoft Office LTSC 2024 554Microsoft Office LTSC 2021 551Windows Server 2022 23h2 544Windows Server 2022, 23H2 Edition (Server Core installation) 543Office 2021 465Office 2024 465Microsoft Office LTSC for Mac 2021 462Microsoft Office LTSC for Mac 2024 462Microsoft Office 365 for Mac 389

Somente exploradas (KEV) →

CVE-2023-21823 Alta · 7.8 KEV Alta · 61 Exploit público CWE-190 14/02/2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-23376 Alta · 7.8 KEV Alta · 65 Ransomware CWE-787 14/02/2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21715 Alta · 7.3 KEV Alta · 55 CWE-863 14/02/2023
Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2023-21529 Alta · 8.8 KEV Alta · 66 Ransomware CWE-502 14/02/2023
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21674 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 10/01/2023
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-44698 Média · 5.4 KEV Alta · 63 Ransomware 13/12/2022
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022
Estouro de Buffer na Heap da GPU do Google Chromium
Estouro de buffer na heap em GPU no Google Chrome anterior à 107.0.5304.121 permitia que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)
CVE-2022-41128 Alta · 8.8 KEV Alta · 59 CWE-787 09/11/2022
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125 Alta · 7.8 KEV Alta · 54 CWE-787 09/11/2022
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41091 Média · 5.4 KEV Alta · 60 Ransomware CWE-863 09/11/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41073 Alta · 7.8 KEV Alta · 64 Ransomware CWE-787 09/11/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41080 Alta · 8.8 KEV Urgente · 72 Exploit público Ransomware 09/11/2022
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41049 Média · 5.4 KEV Alta · 51 09/11/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41033 Alta · 7.8 KEV Alta · 53 CWE-843 11/10/2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028 Alta · 7.8 KEV Alta · 66 11/10/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41040 Alta · 8.8 KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082 Alta · 8.0 KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-37969 Alta · 7.8 KEV Urgente · 72 Exploit público Ransomware CWE-787 13/09/2022
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-34713 Alta · 7.8 KEV Alta · 56 09/08/2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-22047 Alta · 7.8 KEV Alta · 56 CWE-426 12/07/2022
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-30168 Alta · 7.8 CWE-20 15/06/2022
Microsoft Photos App Remote Code Execution Vulnerability
Microsoft Photos App Remote Code Execution Vulnerability
CVE-2022-30190 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware 01/06/2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVE-2022-26925 Média · 5.9 KEV Alta · 55 CWE-306 10/05/2022
Vulnerabilidade de Spoofing no LSA do Microsoft Windows
Vulnerabilidade de spoofing no LSA do Windows
CVE-2022-26923 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-295 10/05/2022
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-26921 Alta · 7.3 15/04/2022
Visual Studio Code Elevation of Privilege Vulnerability
Visual Studio Code Elevation of Privilege Vulnerability