Microsoft Vulnerabilità

Sequenza temporale

Genere

Prodotto

Microsoft Windows4930
Microsoft Internet Explorer1260
Microsoft Edge946
Microsoft Office503
Microsoft SharePoint Server207

Contromisure

Official Fix9486
Temporary Fix1
Workaround24
Unavailable80
Not Defined409

Sfruttabilità

High179
Functional84
Proof-of-Concept1726
Unproven2939
Not Defined5072

Accesso al vettore

Not Defined0
Physical58
Local1613
Adjacent196
Network8133

Autenticazione

Not Defined0
High337
Low4013
None5650

Interazione dell'utente

Not Defined0
Required4150
None5850

C3BM Index

CVSSv3 Base

≤10
≤20
≤318
≤4187
≤51148
≤61669
≤72434
≤82768
≤91210
≤10566

CVSSv3 Temp

≤10
≤20
≤352
≤4312
≤51512
≤62296
≤72947
≤81943
≤9608
≤10330

VulDB

≤10
≤23
≤3127
≤4512
≤51335
≤61098
≤73309
≤81802
≤91225
≤10589

NVD

≤10
≤20
≤310
≤449
≤5320
≤6778
≤7465
≤82329
≤9553
≤10118

CNA

≤11
≤20
≤34
≤416
≤592
≤6177
≤7383
≤8844
≤9322
≤1052

Fornitore

≤10
≤20
≤317
≤462
≤5857
≤6673
≤7928
≤82382
≤9575
≤10111

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤100

Exploiter 0 giorni

<1k9
<2k11
<5k198
<10k692
<25k2354
<50k2787
<100k3309
≥100k640

Exploiter aujourd'hui

<1k3969
<2k663
<5k1343
<10k1779
<25k2188
<50k41
<100k17
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (429): .NET (38), .NET Core (23), .NET Core SDK (1), .NET Education Bundle SDK Install Tool (1), .NET Framework (138), .NET Install Tool for Extension Authors (1), 3D Builder (20), 3D Viewer (10), 4K Wireless Display Adapter (1), 365 Apps for Enterprise (23), @azure-ms-rest-nodeauth (1), ADAL.NET (1), ADAM (1), ASP.NET (10), ASP.NET Core (27), ASP.NET Core MVC (2), ASP.NET MVC (1), ASP .NET SignalR (1), AV1 Video Extension (6), Access (10), Accessibility Insights (1), Accessibility Insights for Web (1), Active Directory Federation Services (1), Anti-cross Site Scripting Library (1), App Installer (1), Application Inspector (1), Authentication Library (1), Authenticator (1), AutoUpdate for Mac (1), Azure (3), Azure AD (1), Azure AD B2C (1), Azure AD Connect (1), Azure API Management Service (1), Azure ARC (1), Azure Active Directory (1), Azure Active Directory B2C (1), Azure Active Directory Connect (2), Azure Active Directory Passport (1), Azure App Service (3), Azure App Service on Azure Stack Hub (1), Azure Arc-Enabled Servers (1), Azure Arc-enabled Kubernetes Cluster (1), Azure Arc Jumpstart (1), Azure Automation (3), Azure Automation State Configuration (1), Azure Automation Update Management (2), Azure Bastion (1), Azure Batch (1), Azure CLI (2), Azure Cognitive Search (1), Azure Command-Line Interface (1), Azure Connected Machine Agent (2), Azure Container Instance (1), Azure Container Registry (1), Azure CycleCloud (3), Azure Data Box Gateway (1), Azure Data Explorer (1), Azure Data Studio (1), Azure DevOps Server (37), Azure Diagnostics (1), Azure Digital Twins Explorer (1), Azure EFLOW (1), Azure File Sync (1), Azure Front Door (1), Azure Function Apps (1), Azure Functions (2), Azure Guest Configuration (1), Azure HDInsights (8), Azure Identity SDK (1), Azure Identity SDK for .NET (1), Azure IoT CLI Extension (1), Azure IoT Edge (2), Azure IoT SDK (1), Azure Kubernetes Service (5), Azure Kubernetes Service Confidential Container (1), Azure Kubernetes Service Confidential Containers (2), Azure Linux Guest Agent (1), Azure Logic Apps (2), Azure Machine Learning (2), Azure Machine Learning SDK (1), Azure Machine Learning Service (1), Azure Migrate (1), Azure Network Watcher VM Extension (2), Azure On-Premises Data Gateway (1), Azure Open Management Infrastructure (5), Azure Pack Rollup (1), Azure Pipelines Agent (1), Azure RTOS (6), Azure RTOS GUIX (1), Azure RTOS GUIX Studio (2), Azure RTOS USBX (2), Azure Real Time Operating System GUIX Studio (8), Azure Resource Manager (1), Azure SDK (1), Azure SDK for .NET (1), Azure SDK for Java (1), Azure SSH Keypairs (1), Azure Security Center (2), Azure Sentinel (2), Azure Service Connector (1), Azure Service Fabric (5), Azure Service Fabric Explorer (1), Azure Site Recovery (2), Azure Site Recovery VMWare to Azure (80), Azure Sphere (30), Azure Spring Cloud (1), Azure Stack (1), Azure Stack Edge (2), Azure Stack Hub (2), Azure StorSimple 8000 (1), Azure Storage Blobs Client Library (2), Azure Storage Mover Agent (1), Azure setup-kubectl (1), Bing (1), Bing Search (2), BizTalk ESB Toolkit (1), Bond (1), Bot Framework SDK (2), Business Productivity Servers (1), C SDK for Azure IoT (2), ChakraCore (207), Chakra Core (5), Chess Titan (1), Clarity (1), Clarity Plugin (1), Common Data Model SDK (1), Common Utilities (1), Compiled HTML Help (1), Container Monitoring Solution (2), Data.OData (1), Data Access Components (2), Debug Diagnostic Tool (1), Defender (1), Defender Antimalware Platform (1), Defender Security Intelligence Updates (2), Defender for Endpoint (4), Defender for Endpoint for Windows (1), Defender for IoT (13), Desktop Client for Mac (1), Diagnostics Troubleshooting Wizard (1), Digital Image (1), DirectX (2), Directx (1), Dynamics (1), Dynamics 365 (69), Dynamics 365 BC On Premise (2), Dynamics 365 Business Central (11), Dynamics 365 Commerce (1), Dynamics 365 Customer Engagement (2), Dynamics 365 Field Service (1), Dynamics 365 Unified Service Desk (1), Dynamics 365 for Finance (2), Dynamics 365 for Finance and Operations (6), Dynamics 365 on-premises (1), Dynamics AX (2), Dynamics CRM (4), Dynamics GP (7), Dynamics NAV (8), Edge (946), Endpoint Configuration Manager (1), Endpoint Protection (1), Enhanced Mitigation Experience Toolkit EMET (1), Enterprise Library (1), Entra Jira Single-Sign-On Plugin (1), Excel (185), Excel 2010 SP2 (1), Exchange (15), Exchange Server (151), Exchange Srv (1), Expression Design (1), FAST ESP (1), FSLogix (1), File Checksum Integrity Verifier (1), Forefront Endpoint Protection (6), Forefront Security for Exchange Server (1), Forefront Threat Management Gateway (1), Forefront Unified Access Gateway (12), FrontPage (1), GitHub Pull Requests and Issues Extension (1), Groove (1), HEIF Image Extension (2), HEVC Video Extensions (42), HTML Help Workshop (1), HoloLens 1 (1), Host Integration Server (3), Host Integration Server 2020 (1), Hub Device Client SDK for Azure IoT (1), Hyper-V (13), IIS (22), ISA Server (3), Identity Linux Broker (1), Identity Manager (1), Identity Model (1), Infopath (2), Internet Authentication Service Helper Com Component (1), Internet Explorer (1260), Internet Security And Acceleration Server (1), Intune Company Portal (1), Intune Management Extension (2), Intune Portal (1), JScript (1), Jarvis (1), Java SDK for Azure IoT (2), Jupyter Extension for Visual Studio Code (2), Kubernetes Tools (1), Log Analytics Agent (2), Lync (21), Lync Server (12), Lync for Mac (1), MPEG-2 Video Extension (1), MSRT (1), Mail Client (1), Malicious Software Removal Tool (2), Malware Protection Engine (15), Maven for Java Extension (1), Media Format Runtime (1), Media Player (3), Microsoft Dynamics 365 (1), Microsoft Malware Protection Platform (1), Microsoft OLE DB Provider for DB2 V7 (1), Money (1), Mono (1), Mono Framework (1), NET Framework (1), Network Watcher Agent Virtual Machine Extension for Linux (1), Nokia Asha 501 (1), NuGet (3), ODBC Driver (7), ODBC Driver for SQL Server (5), OLE DB (1), OLE DB Driver (5), OLE DB Driver for SQL Server (1), Office (503), Office 365 (4), Office 365 ProPlus (1), Office App (1), Office Communicator (2), Office Compability Pack (1), Office Compatibility Pack (11), Office Converter Pack (1), Office Excel (4), Office LTSC (3), Office Online Server (11), Office Picture Manager (1), Office SharePoint Server (1), Office Snapshot Viewer ActiveX (1), Office Web Apps (10), Office Web Apps Server (8), Office Word Viewer (2), Office for Mac 2011 (1), On-Prem Data Gateway (1), On-Premises Data Gateway (1), OneDrive (13), OneNote (7), Open Enclave SDK (3), Open Management Infrastructure (2), Open XML File Format Converter (1), Operations (2), Operations Management Suite Agent (1), Organization Chart (1), Outlook (57), Outlook.com (1), Outlook Express (1), Outlook Web Access (2), Outlook Web App (1), Package Manager Configurations (1), Paint 3D (6), PandocUpload (1), Passport-SAML (1), Peachtree Accounting (1), Photos (1), Power Apps (2), Power Automate (1), Power BI (1), PowerBI-Client JS SDK (1), Power BI Report Server (6), Power Platform (2), PowerPoint (52), PowerPoint Viewer (4), PowerShell (2), PowerShell Core (1), PowerShell Editor Services (1), PowerShell Extension for Visual Studio Code (1), PowerShellGet (1), Powerpoint (1), Print 3D (1), Printer Metadata Troubleshooter Tool (1), Project (6), Project Server (3), Publisher (18), Publisher 2003 (9), Python Extension for Visual Studio Code (1), Quantum Development Kit for Visual Studio Code (1), RMS Sharing for Mac (1), RTOS GUIX (3), Raw Image Extension (14), Remote Desktop (1), Remote Desktop Connection Client (1), Remote Desktop Connection Manager (1), Remote Desktop For Mac (1), Research JavaScript Cryptography Library (2), Rome SDK (2), SCS Add-on (1), SQL Server (46), SQL Server 2017 Reporting Services (1), SQL Server 2019 Reporting Services (1), SQL Server Backend for Django (1), SQL Server Management Studio (6), Security Essentials (9), Security Essentials Antimalware Engine (2), Send Customer Voice survey from Dynamics 365 (1), Send Customer Voice survey from Dynamics 365 App (1), Service Fabric (1), SharePoint (64), SharePoint Enterprise Server (132), SharePoint Foundation (62), SharePoint Server (207), SharePoint Services (1), Sharepoint (6), Silverlight (17), Skype (15), Skype Extension (1), Skype for Android (1), Skype for Business (15), Skype for Business Server (14), Skype for Consumer (1), Snip & Sketch (1), Snipping Tool (1), Software for Open Networking in the Cloud (1), Sterling Connect Direct (1), Surface Hub (1), Surface Pro (1), SysInternals Sysmon (1), Sysinternals Process Monitor (1), Sysinternals PsExec (1), System Center (1), System Center Endpoint Protection (8), System Center Operations Manager (10), System Center Virtual Machine Manager (1), Systems Management Server (1), Team Foundation Server (23), Teams (10), Teams Admin Center (1), Tech Companion (1), VBScript (1), VISIO (1), VP9 Video Extensions (7), Virtual PC (2), Virtual Server (1), Visio (23), Visio Viewer (6), Visual Basic (5), Visual Basic Enterprise Edition (1), Visual C++ (1), Visual C++ Redistributable (1), Visual InterDev (1), Visual Studio (133), Visual Studio Code (45), Visual Studio Code Live Share Extension (1), Visual Studio Code Remote Containers Extension (1), Visual Studio Code WSL Extension (1), Visual Studio Community (1), Visual Studio Team Foundation Server (1), WMI Administrative Tools (1), Web Media Extensions (1), WebP Image Extension (1), Whale Communication IAG (1), Windows (4930), Windows-nt (1), Windows 10 Update Assistant (2), Windows Admin Center (2), Windows Azure Sdk (1), Windows Defender (9), Windows Defender Antimalware Platform (2), Windows Embedded (1), Windows Essentials (1), Windows Host Compute (1), Windows Image Acquisition Logger (1), Windows Installer (1), Windows Live Messenger (4), Windows Live Movie Maker (1), Windows Live OneCare (1), Windows Live Onecare (2), Windows Media Center (2), Windows Media Center TV Pack (1), Windows Media Encoder (1), Windows Media Format Runtime (1), Windows Media Player (12), Windows Messenger (1), Windows Mobile (3), Windows Modern Mail (1), Windows Movie Maker (2), Windows Phone (2), Windows Search (1), Windows Server (1), Windows Subsystem for Linux (1), Windows Sysmon (1), Windows Upgrade Assistant (1), Wireless Desktop 2000 (1), Wireless Display Adapter V2 (1), Wireless Keyboard (2), Word (107), Word 2003 (1), WordPad (1), Word Viewer (3), Works (3), XML Core Services (9), Xamarin.Forms (1), Xbox Gaming Services (1), Xbox Live (1), Xerte (1), YARP (2), Yammer (1), YourPhone App (1), Zune (1), az functionapp config appsettings delete (1), az functionapp config appsettings set (1), az logicapp config appsettings delete (1), az logicapp config appsettings set (1), az staticwebapp appsettings delete (1), az staticwebapp appsettings set (1), az webapp config appsettings delete (1), az webapp config appsettings set (1), iis (2), msgraph-sdk-php (1), msgraph-sdk-php-core (1), typed-rest-client (1), workspace-tools (1)

Link to Vendor Website: https://www.microsoft.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConCTIEPSSCVE
27/03/20244.34.1Microsoft Windows Unicode Zalgo denial of serviceOperating SystemProof-of-ConceptNot Defined0.310.00045CVE-2017-20190
23/03/20246.46.3Microsoft .NET Framework rivelazione di un 'informazioneProgramming Language SoftwareNot DefinedOfficial Fix0.020.00043CVE-2024-29059
22/03/20244.34.2Microsoft Edge vulnerabilità sconosciutaWeb BrowserNot DefinedOfficial Fix0.120.00043CVE-2024-29057
22/03/20244.54.4Microsoft Edge vulnerabilità sconosciutaWeb BrowserNot DefinedOfficial Fix0.050.00043CVE-2024-26247
21/03/20248.38.1Microsoft Xbox Gaming Services Local Privilege EscalationGame ConsoleNot DefinedOfficial Fix0.130.00043CVE-2024-28916
15/03/20242.82.8Microsoft Edge rivelazione di un 'informazioneWeb BrowserNot DefinedOfficial Fix0.030.00048CVE-2024-26246
15/03/20244.54.4Microsoft Edge vulnerabilità sconosciutaWeb BrowserNot DefinedOfficial Fix0.140.00063CVE-2024-26163
12/03/20249.88.5Microsoft Open Management Infrastructure OMI Remote Code ExecutionSconosciutoUnprovenOfficial Fix0.040.00091CVE-2024-21334
12/03/20246.45.5Microsoft Outlook rivelazione di un 'informazioneGroupware SoftwareUnprovenOfficial Fix0.040.00087CVE-2024-26204
12/03/20247.37.0Microsoft Azure Data Studio Local Privilege EscalationCloud SoftwareHighOfficial Fix0.020.00043CVE-2024-26203
12/03/20246.55.7Microsoft Windows Standards-Based Storage Management Service denial of serviceOperating SystemUnprovenOfficial Fix0.020.00044CVE-2024-26197
12/03/20245.95.2Microsoft Windows Compressed Folder vulnerabilità sconosciutaOperating SystemUnprovenOfficial Fix0.030.00048CVE-2024-26185
12/03/20247.86.8Microsoft Windows Composite Image File System Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00043CVE-2024-26170
12/03/20247.86.8Microsoft Windows Error Reporting Service Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00043CVE-2024-26169
12/03/20248.87.7Microsoft Visual Studio Code Privilege EscalationProgramming Tool SoftwareUnprovenOfficial Fix0.080.00050CVE-2024-26165
12/03/20247.86.8Microsoft Windows NTFS Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.090.00043CVE-2024-21446
12/03/20247.06.1Microsoft Windows USB Print Driver Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-21445
12/03/20247.86.8Microsoft Windows USB Print Driver Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-21442
12/03/20247.06.1Microsoft Windows Telephony Server Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-21439
12/03/20247.86.8Microsoft Windows Graphics Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-21437
12/03/20247.86.8Microsoft Windows Installer Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00043CVE-2024-21436
12/03/20247.06.1Microsoft Windows Print Spooler Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.060.00043CVE-2024-21433
12/03/20247.06.1Microsoft Windows Update Stack Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-21432
12/03/20247.86.8Microsoft Windows Hypervisor-Protected Code Integrity Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.070.00043CVE-2024-21431
12/03/20247.56.5Microsoft Windows Kerberos Privilege EscalationOperating SystemUnprovenOfficial Fix0.000.00050CVE-2024-21427
12/03/20246.45.5Microsoft Azure SDK rivelazione di un 'informazioneCloud SoftwareUnprovenOfficial Fix0.050.00087CVE-2024-21421
12/03/20247.86.8Microsoft Software for Open Networking in the Cloud Local Privilege EscalationCloud SoftwareUnprovenOfficial Fix0.090.00043CVE-2024-21418
12/03/20245.54.8Microsoft Windows Hyper-V denial of serviceOperating SystemUnprovenOfficial Fix0.020.00043CVE-2024-21408
12/03/20247.56.7Microsoft .NET/Visual Studio denial of serviceProgramming Tool SoftwareProof-of-ConceptOfficial Fix0.040.00046CVE-2024-21392
12/03/20247.87.0Microsoft Azure Automation Open Management Infrastructure Local Privilege EscalationCloud SoftwareProof-of-ConceptOfficial Fix0.050.00043CVE-2024-21330
12/03/20247.86.8Microsoft Windows Kernel Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.020.00043CVE-2024-26182
12/03/20245.54.8Microsoft Windows Kernel denial of serviceOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-26181
12/03/20247.86.8Microsoft Windows Kernel Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.020.00043CVE-2024-26178
12/03/20247.86.8Microsoft Windows Kernel Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00043CVE-2024-26176
12/03/20247.86.8Microsoft Windows Kernel Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00043CVE-2024-26173
12/03/20244.43.8Microsoft Windows Cloud Files Mini Filter Driver rivelazione di un 'informazioneOperating SystemUnprovenOfficial Fix0.020.00043CVE-2024-26160
12/03/20247.66.6Microsoft Windows Kernel Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.050.00043CVE-2024-21443
12/03/20244.43.8Microsoft Windows Kernel rivelazione di un 'informazioneOperating SystemUnprovenOfficial Fix0.000.00043CVE-2024-26177
12/03/20244.43.8Microsoft Windows Kernel rivelazione di un 'informazioneOperating SystemUnprovenOfficial Fix0.040.00043CVE-2024-26174
12/03/20248.87.7Microsoft Windows OLE Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.160.00091CVE-2024-21435
12/03/20245.65.1Microsoft Windows USB Attached SCSI Remote Code ExecutionOperating SystemProof-of-ConceptOfficial Fix0.040.00043CVE-2024-21430
12/03/20247.56.5Microsoft Windows USB Hub Driver Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.060.00053CVE-2024-21429
12/03/20248.87.7Microsoft Skype for Consumer Remote Code ExecutionUnified Communication SoftwareUnprovenOfficial Fix0.030.00124CVE-2024-21411
12/03/20248.17.1Microsoft Windows Hyper-V Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.000.00091CVE-2024-21407
12/03/20245.54.8Microsoft Dynamics 365 cross site scriptingSconosciutoUnprovenOfficial Fix0.090.00049CVE-2024-21419
12/03/20244.64.1Microsoft Teams rivelazione di un 'informazioneUnified Communication SoftwareUnprovenOfficial Fix0.000.00043CVE-2024-21448
12/03/20247.56.5Microsoft Windows QUIC denial of serviceOperating SystemUnprovenOfficial Fix0.000.00046CVE-2024-26190
12/03/20247.56.5Microsoft Windows AllJoyn API denial of serviceOperating SystemUnprovenOfficial Fix0.040.00046CVE-2024-21438
12/03/20249.08.1Microsoft Azure Kubernetes Service Confidential Container Remote Code ExecutionCloud SoftwareProof-of-ConceptOfficial Fix0.030.00091CVE-2024-21400
12/03/20245.95.2Microsoft Authenticator Local Privilege EscalationSconosciutoUnprovenOfficial Fix0.040.00053CVE-2024-21390

9950 non vengono visualizzate più voci

Might our Artificial Intelligence support you?

Check our Alexa App!