CVE Intelligence

Vulnerabilidades de Microsoft

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Microsoft: 5234 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-70200 Crítica · 9.8 CWE-22 17/09/2026
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70009 Crítica · 9.8 CWE-22 17/09/2026
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69865 Crítica · 10.0 CWE-639 17/09/2026
Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69399 Crítica · 9.8 CWE-441 17/09/2026
Azure Arc Elevation of Privilege Vulnerability
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-68791 Alta · 7.5 CWE-863 17/09/2026
Azure Machine Learning Information Disclosure Vulnerability
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
CVE-2026-55946 Média · 5.9 CWE-77 17/09/2026
Microsoft Copilot Information Disclosure Vulnerability
Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-85893 Alta · 8.8 CWE-416 15/09/2026
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69486 Alta · 8.8 CWE-122 15/09/2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85921 Alta · 8.2 CWE-415 14/09/2026
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-85892 Alta · 7.8 CWE-362 14/09/2026
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-77490 Média · 6.1 CWE-79 11/09/2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70341 Alta · 8.8 CWE-416 11/09/2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-69646 Alta · 8.3 CWE-347 08/09/2026
Skype for Business Spoofing Vulnerability
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642 Média · 6.1 CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66308 Média · 6.5 CWE-125 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307 Alta · 7.5 CWE-191 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306 Média · 6.5 CWE-209 08/09/2026
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305 Alta · 7.1 CWE-603 08/09/2026
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-66304 Alta · 7.5 CWE-918 08/09/2026
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303 Média · 6.5 CWE-476 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66302 Crítica · 9.8 CWE-73 08/09/2026
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-63523 Média · 6.1 CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85880 Alta · 7.8 KEV Alta · 54 CWE-122 08/09/2026
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-85877 Alta · 8.8 CWE-122 08/09/2026
Windows Print Spooler Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
CVE-2026-85875 Média · 5.5 CWE-125 08/09/2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.