Microsoft Vulnerabilidades

Curso de tempo

Tipo

Produto

Microsoft Windows4679
Microsoft Internet Explorer1581
Microsoft Edge850
Microsoft Office519
Microsoft ChakraCore207

Medidas

Official Fix9301
Temporary Fix0
Workaround69
Unavailable125
Not Defined505

Explorabilidade

High220
Functional82
Proof-of-Concept2273
Unproven2114
Not Defined5311

Tipo de acesso

Not Defined0
Physical48
Local1365
Adjacent225
Network8362

Autenticação

Not Defined0
High288
Low3619
None6093

Actividade do utilizador

Not Defined0
Required4113
None5887

C3BM Index

CVSSv3 Base

≤10
≤20
≤316
≤4219
≤51153
≤61775
≤72431
≤82671
≤91072
≤10663

CVSSv3 Temp

≤10
≤20
≤351
≤4363
≤51569
≤62451
≤72951
≤81682
≤9556
≤10377

VulDB

≤10
≤22
≤3109
≤4494
≤51280
≤61267
≤73306
≤81760
≤91096
≤10686

NVD

≤10
≤20
≤39
≤446
≤5303
≤6746
≤7442
≤82271
≤9527
≤10107

CNA

≤10
≤20
≤32
≤45
≤548
≤690
≤7192
≤8420
≤9160
≤1014

Fabricante

≤10
≤20
≤316
≤458
≤5832
≤6587
≤7743
≤81963
≤9415
≤1079

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤100

Explorar 0 dia

<1k8
<2k11
<5k206
<10k598
<25k2344
<50k2272
<100k3783
≥100k778

Explorar hoje

<1k4223
<2k588
<5k1266
<10k1599
<25k2256
<50k48
<100k20
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (425): .NET (14), .NET Core (23), .NET Core SDK (1), .NET Education Bundle SDK Install Tool (1), .NET Framework (121), .NET Install Tool for Extension Authors (1), 3D Builder (16), 3D Viewer (7), 4K Wireless Display Adapter (1), 365 Apps for Enterprise (18), @azure-ms-rest-nodeauth (1), ADAL.NET (1), ADAM (1), ASP.NET (13), ASP.NET Core (25), ASP.NET Core MVC (2), ASP.NET MVC (1), ASP .NET SignalR (1), AV1 Video Extension (4), Access (12), Accessibility Insights (1), Accessibility Insights for Web (1), Active Directory Federation Services (1), ActiveSync (3), ActiveX (2), Agent (1), Anti-cross Site Scripting Library (1), App Installer (1), Application Inspector (1), Atlas framework (1), Authentication Library (1), AutoUpdate for Mac (1), Azure AD B2C (1), Azure AD Connect (1), Azure API Management Service (1), Azure ARC (1), Azure Active Directory (1), Azure Active Directory Connect (2), Azure Active Directory Passport (1), Azure App Service (3), Azure App Service on Azure Stack Hub (1), Azure Arc-enabled Kubernetes Cluster (1), Azure Automation (2), Azure Automation State Configuration (1), Azure Automation Update Management (1), Azure Batch (1), Azure CLI (2), Azure Cognitive Search (1), Azure Container Instance (1), Azure CycleCloud (3), Azure Data Box Gateway (1), Azure Data Explorer (1), Azure DevOps Server (29), Azure Diagnostics (1), Azure Digital Twins Explorer (1), Azure EFLOW (1), Azure Function Apps (1), Azure Functions (2), Azure Guest Configuration (1), Azure IoT CLI Extension (1), Azure IoT Edge (2), Azure IoT SDK (1), Azure Kubernetes Service (4), Azure Linux Guest Agent (1), Azure Logic Apps (1), Azure Machine Learning (1), Azure Machine Learning Service (1), Azure Migrate (1), Azure Network Watcher VM Extension (1), Azure Open Management Infrastructure (5), Azure Pack Rollup (1), Azure RTOS (6), Azure RTOS GUIX (1), Azure RTOS GUIX Studio (1), Azure RTOS USBX (2), Azure Real Time Operating System GUIX Studio (8), Azure SDK for .NET (1), Azure SDK for Java (1), Azure SSH Keypairs (1), Azure Security Center (1), Azure Sentinel (1), Azure Service Fabric (3), Azure Service Fabric Explorer (1), Azure Site Recovery (1), Azure Site Recovery VMWare to Azure (80), Azure Sphere (30), Azure Spring Cloud (1), Azure Stack (1), Azure Stack Edge (2), Azure Stack Hub (1), Azure StorSimple 8000 (1), Azure Storage Blobs Client Library (2), Baseline Security Analyzer (1), Bing (1), Bing Search (2), BizTalk ESB Toolkit (1), BizTalk Server (1), Bond (1), Bot Framework SDK (2), Business Productivity Servers (1), C SDK for Azure IoT (2), Cabarc (1), ChakraCore (207), Chakra Core (5), Chess Titan (1), Clarity (1), Class Package Export Tool (1), Commerce Server (3), Common Utilities (1), Compiled HTML Help (1), Container Monitoring Solution (1), Content Management Server (2), Data.OData (1), Data Access Components (5), Debug Diagnostic Tool (1), Defender (1), Defender Antimalware Platform (1), Defender Security Intelligence Updates (1), Defender for Endpoint (4), Defender for IoT (13), Desktop Client for Mac (1), Diagnostics Troubleshooting Wizard (1), Digital Image (1), DirectX (7), DirectX Media (1), Directx (1), Dynamics (1), Dynamics 365 (37), Dynamics 365 BC On Premise (2), Dynamics 365 Business Central (9), Dynamics 365 Commerce (1), Dynamics 365 Customer Engagement (1), Dynamics 365 Field Service (1), Dynamics 365 Unified Service Desk (1), Dynamics 365 for Finance (2), Dynamics 365 for Finance and Operations (3), Dynamics 365 on-premises (1), Dynamics AX (2), Dynamics CRM (4), Dynamics GP (9), Dynamics NAV (7), Edge (850), Endpoint Configuration Manager (1), Endpoint Protection (1), Enhanced Mitigation Experience Toolkit EMET (1), Enterprise Library (1), Excel (205), Excel 2010 SP2 (1), Excel Viewer (2), Exchange (29), Exchange Server (125), Exchange Srv (1), Expression Design (1), Expression Media (1), FAST ESP (1), FSLogix (1), File Checksum Integrity Verifier (1), Forefront Endpoint Protection (6), Forefront Security for Exchange Server (1), Forefront Threat Management Gateway (1), Forefront Unified Access Gateway (12), FrontPage (2), FrontPage Extensions (1), FrontPage Server Extensions (2), GitHub Pull Requests and Issues Extension (1), Groove (1), HEIF Image Extension (2), HEVC Video Extensions (41), HTML Help Workshop (2), Help Workshop (2), HoloLens 1 (1), Host Integration Server (3), Hub Device Client SDK for Azure IoT (1), Hyper-V (13), Hyperlink Object Library (1), IE for Macintosh (1), IIS (39), ISA Server (21), Identity Manager (1), Infopath (2), Interactive Training (1), Internet Authentication Service Helper Com Component (1), Internet Explorer (1581), Internet Information Services (1), Internet Security And Acceleration Server (1), Intune Management Extension (2), Intune Portal (1), JScript (1), Java SDK for Azure IoT (2), Java Virtual Machine (1), Jet (1), Jet Database Engine (3), Jupyter Extension for Visual Studio Code (1), Kubernetes Tools (1), Log Analytics Agent (1), Log Sink Class ActiveX control (1), Lync (21), Lync Server (12), Lync for Mac (1), MPEG-2 Video Extension (1), MSN Messenger (5), MSRT (1), Mail Client (1), Malicious Software Removal Tool (2), Malware Protection Engine (11), Maven for Java Extension (1), Media Format Runtime (1), Media Player (5), Media Services (1), Messenger (1), Microsoft (1), Microsoft .NET Framework (1), Microsoft Dynamics 365 (4), Microsoft Dynamics NAV 2015 (1), Microsoft Edge (1), Microsoft Exchange Server (6), Microsoft Photos (1), Money (1), Mono Framework (1), NET Framework (6), NetMeeting (1), Network Watcher Agent Virtual Machine Extension for Linux (1), Nokia Asha 501 (1), NuGet (2), Office (519), Office 365 (4), Office 365 ProPlus (1), Office App (1), Office Communicator (2), Office Compability Pack (1), Office Compatibility Pack (11), Office Converter Pack (1), Office Excel (4), Office InfoPath (1), Office LTSC (1), Office Online Server (10), Office Picture Manager (1), Office Publisher (1), Office SharePoint Server (2), Office Snapshot Viewer ActiveX (1), Office Web Apps (10), Office Web Apps Server (7), Office Web Components (1), Office Word Viewer (2), Office for Mac 2011 (1), On-Premises Data Gateway (1), OneDrive (9), OneNote (5), Open Enclave SDK (3), Open XML File Format Converter (1), Operations (2), Organization Chart (1), Outlook (61), Outlook.com (1), Outlook Express (13), Outlook Express Book Control (1), Outlook Web Access (2), Outlook Web App (1), Package Manager Configurations (1), Paint 3D (4), Passport-SAML (1), Peachtree Accounting (1), Personal Firewall (2), Power Apps (1), Power Automate (1), Power BI (1), PowerBI-Client JS SDK (1), Power BI Report Server (6), PowerPoint (64), PowerPoint Viewer (5), PowerShell (1), PowerShell Core (1), PowerShell Editor Services (1), PowerShell Extension for Visual Studio Code (1), PowerShellGet (1), Powerpoint (1), Print 3D (1), Project (7), Project Server (4), Proxy Server (1), Publisher (20), Publisher 2003 (9), Quantum Development Kit for Visual Studio Code (1), RMS Sharing for Mac (1), RTOS GUIX (3), Raw Image Extension (11), Register Server (1), Remote Desktop Connection Client (1), Remote Desktop Connection Manager (1), Remote Desktop For Mac (1), Research JavaScript Cryptography Library (2), Rich Textbox Control (1), Rome SDK (2), SCS Add-on (1), SMS Console (1), SMS Server (1), SQL Server (44), SQL Server 2017 Reporting Services (1), SQL Server 2019 Reporting Services (1), SQL Server Management Studio (6), Secure Access (1), Security Essentials (9), Security Essentials Antimalware Engine (2), Service Fabric (1), SharePoint (63), SharePoint Enterprise Server (131), SharePoint Foundation (62), SharePoint Server (183), SharePoint Services (1), SharePoint Team Services (1), Sharepoint (6), Sharepoint Portal Server (1), Silverlight (17), Skype (14), Skype Extension (1), Skype for Android (1), Skype for Business (15), Skype for Business Server (9), Sterling Connect Direct (1), Surface Hub (1), Surface Pro (1), Sysinternals (1), Sysinternals PsExec (1), System Center (1), System Center Endpoint Protection (8), System Center Operations Manager (7), System Center Virtual Machine Manager (1), System Information ActiveX control (1), Systems Management Server (2), Team Foundation Server (23), Teams (5), Teams Admin Center (1), Tech Companion (1), Teredo (4), Terminal Server (2), VBScript (1), VISIO (1), VP9 Video Extensions (6), Vfp Ole Server Activex Control (1), Virtual PC (4), Virtual Server (1), Visio (28), Visio Viewer (6), Visual Basic (10), Visual Basic Enterprise Edition (1), Visual C++ (1), Visual C++ Redistributable (1), Visual Database Tools Database Designer (1), Visual FoxPro (2), Visual InterDev (2), Visual Studio (95), Visual Studio .net (1), Visual Studio Code (38), Visual Studio Code Live Share Extension (1), Visual Studio Code Remote Containers Extension (1), Visual Studio Code WSL Extension (1), Visual Studio Community (1), Visual Studio Team Foundation Server (1), W3Who ISAPI (2), WMI Administrative Tools (1), WebDAV Mini-Redirector (1), Web Media Extensions (1), WebP Image Extension (1), Web Proxy (1), Whale Communication IAG (1), Windows (4679), Windows-nt (1), Windows 10 Update Assistant (2), Windows Admin Center (1), Windows Azure Sdk (1), Windows Defender (8), Windows Digital Rights Management (1), Windows Embedded (1), Windows Essentials (1), Windows Event Viewer (1), Windows Explorer (2), Windows Host Compute (1), Windows Image Acquisition Logger (1), Windows Installer (1), Windows Live Messenger (7), Windows Live Movie Maker (1), Windows Live OneCare (1), Windows Live Onecare (2), Windows Mail (3), Windows Media Center (2), Windows Media Center TV Pack (1), Windows Media Encoder (1), Windows Media Format Runtime (1), Windows Media Player (20), Windows Media Services (1), Windows Messenger (1), Windows Mobile (7), Windows Mobile Pocket PC (1), Windows Modern Mail (1), Windows Movie Maker (2), Windows Phone (2), Windows Search (1), Windows Server (1), Windows SharePoint Services (1), Windows Subsystem for Linux (1), Windows Sysmon (1), Windows Upgrade Assistant (1), Wireless Desktop 2000 (1), Wireless Display Adapter V2 (1), Wireless Keyboard (2), Wireless Zero Configuration system (1), Word (125), Word 2003 (1), WordPad (1), WordPerfect (1), Word Viewer (4), Works (9), XML Core Services (12), Xamarin.Forms (1), Xbox 360 (2), Xbox Live (1), Xerte (1), YARP (1), Yammer (1), YourPhone App (1), Zune (1), antispyware (2), iis (2), winword (1), workspace-tools (1)

Link to Vendor Website: https://www.microsoft.com/

Publicado emBaseTempVulnerabilidadeProdExpMasCTIEPSSCVE
17/02/20233.13.0Microsoft Azure AD B2C OAuth Refresh Token Encriptação fracaCloud SoftwareNot DefinedOfficial Fix0.440.00000
14/02/20237.06.1Microsoft 3D Builder Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.040.01103CVE-2023-23390
14/02/20235.44.7Microsoft Azure Machine Learning Divulgação de InformaçãoCloud SoftwareUnprovenOfficial Fix0.040.00885CVE-2023-23382
14/02/20237.86.8Microsoft Visual Studio Remote Code ExecutionProgramming Tool SoftwareUnprovenOfficial Fix0.170.01103CVE-2023-23381
14/02/20236.55.7Microsoft Defender for IoT Privilege EscalationDesconhecidoUnprovenOfficial Fix0.070.00885CVE-2023-23379
14/02/20237.06.4Microsoft Print 3D Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.130.01103CVE-2023-23378
14/02/20237.06.1Microsoft 3D Builder Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.040.01103CVE-2023-23377
14/02/20238.37.3Microsoft Windows Common Log File System Driver Privilege EscalationOperating SystemUnprovenOfficial Fix0.300.00885CVE-2023-23376
14/02/20238.38.0Microsoft Windows Graphics Privilege EscalationOperating SystemHighOfficial Fix1.430.01103CVE-2023-21823
14/02/20238.37.3Microsoft Windows Graphics Privilege EscalationOperating SystemUnprovenOfficial Fix0.170.00885CVE-2023-21822
14/02/20238.17.1Microsoft Windows Distributed File System Privilege EscalationOperating SystemUnprovenOfficial Fix0.090.01103CVE-2023-21820
14/02/20237.56.5Microsoft Windows Secure Channel Negação de ServiçoOperating SystemUnprovenOfficial Fix0.090.00885CVE-2023-21819
14/02/20237.56.5Microsoft Windows Secure Channel Negação de ServiçoOperating SystemUnprovenOfficial Fix0.090.00885CVE-2023-21818
14/02/20238.37.3Microsoft Windows Kerberos Privilege EscalationOperating SystemUnprovenOfficial Fix0.060.00885CVE-2023-21817
14/02/20237.56.5Microsoft Windows Active Directory Domain Services API Negação de ServiçoOperating SystemUnprovenOfficial Fix0.100.00885CVE-2023-21816
14/02/20236.75.8Microsoft Visual Studio Remote Code ExecutionProgramming Tool SoftwareUnprovenOfficial Fix0.260.01103CVE-2023-21815
14/02/20237.56.5Microsoft Windows Secure Channel Negação de ServiçoOperating SystemUnprovenOfficial Fix0.130.00885CVE-2023-21813
14/02/20238.37.3Microsoft Windows Common Log File System Driver Privilege EscalationOperating SystemUnprovenOfficial Fix0.170.00885CVE-2023-21812
14/02/20237.56.5Microsoft Windows iSCSI Service Negação de ServiçoOperating SystemUnprovenOfficial Fix0.040.00885CVE-2023-21811
14/02/20238.87.7Microsoft Defender Security Intelligence Updates Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.130.00885CVE-2023-21809
14/02/20237.06.1Microsoft .NET Framework Remote Code ExecutionProgramming Language SoftwareUnprovenOfficial Fix0.260.01103CVE-2023-21808
14/02/20234.64.1Microsoft Dynamics 365 Divulgação de InformaçãoDesconhecidoUnprovenOfficial Fix0.110.00885CVE-2023-21807
14/02/20237.86.7Microsoft Power BI Report Server Privilege EscalationReporting SoftwareUnprovenOfficial Fix0.050.00885CVE-2023-21806
14/02/20238.37.3Microsoft Windows MSHTML Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.090.01103CVE-2023-21805
14/02/20238.37.3Microsoft Windows Graphics Privilege EscalationOperating SystemUnprovenOfficial Fix0.070.00885CVE-2023-21804
14/02/20239.88.5Microsoft Windows iSCSI Discovery Service Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.820.01156CVE-2023-21803
14/02/20238.37.3Microsoft Windows Media Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.040.01103CVE-2023-21802
14/02/20238.37.3Microsoft Windows PostScript Printer Driver Privilege EscalationOperating SystemUnprovenOfficial Fix0.170.01103CVE-2023-21801
14/02/20238.37.3Microsoft Windows Installer Privilege EscalationOperating SystemUnprovenOfficial Fix0.040.00885CVE-2023-21800
14/02/20238.87.7Microsoft Windows WDAC OLE DB provider for SQL Server Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.170.01156CVE-2023-21799
14/02/20238.87.7Microsoft Windows ODBC Driver Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.040.01156CVE-2023-21798
14/02/20238.87.7Microsoft Windows ODBC Driver Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.090.01156CVE-2023-21797
14/02/20238.37.2Microsoft Dynamics 365 Unified Service Desk Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.110.01156CVE-2023-21778
14/02/20238.07.0Microsoft Azure App Service on Azure Stack Hub Privilege EscalationCloud SoftwareUnprovenOfficial Fix0.000.00885CVE-2023-21777
14/02/20234.94.3Microsoft .NET Framework Negação de ServiçoProgramming Language SoftwareUnprovenOfficial Fix0.170.00885CVE-2023-21722
14/02/20235.95.1Microsoft OneNote Local Privilege EscalationAndroid App SoftwareUnprovenOfficial Fix0.290.00885CVE-2023-21721
14/02/20238.37.3Microsoft SQL Server ODBC Driver Remote Code ExecutionDatabase SoftwareUnprovenOfficial Fix0.220.01103CVE-2023-21718
14/02/20238.87.7Microsoft SharePoint Foundation Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.040.00885CVE-2023-21717
14/02/20238.07.0Microsoft Word Remote Code ExecutionWord Processing SoftwareUnprovenOfficial Fix2.320.01156CVE-2023-21716
14/02/20236.85.9Microsoft 365 Apps for Enterprise Remote Code ExecutionDesconhecidoUnprovenOfficial Fix0.220.00885CVE-2023-21715
14/02/20234.94.3Microsoft Office LTSC/365 Apps for Enterprise Divulgação de InformaçãoOffice Suite SoftwareUnprovenOfficial Fix0.130.00885CVE-2023-21714
14/02/20238.87.7Microsoft SQL Server Privilege EscalationDatabase SoftwareUnprovenOfficial Fix0.350.01156CVE-2023-21713
14/02/20237.26.3Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.430.01156CVE-2023-21710
14/02/20238.87.7Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.220.01156CVE-2023-21707
14/02/20238.87.7Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.700.01156CVE-2023-21706
14/02/20238.87.7Microsoft SQL Server Privilege EscalationDatabase SoftwareUnprovenOfficial Fix0.430.01156CVE-2023-21705
14/02/20238.37.3Microsoft SQL Server ODBC Driver Privilege EscalationDatabase SoftwareUnprovenOfficial Fix0.170.01103CVE-2023-21704
14/02/20236.96.0Microsoft Azure Data Box Gateway/Azure Stack Edge Privilege EscalationCloud SoftwareUnprovenOfficial Fix0.000.01156CVE-2023-21703
14/02/20237.56.5Microsoft Windows iSCSI Service Negação de ServiçoOperating SystemUnprovenOfficial Fix0.090.00885CVE-2023-21702
14/02/20237.56.5Microsoft Windows PEAP Negação de ServiçoOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21701

9950 as entradas adicionais não são mais exibidas

Do you know our Splunk app?

Download it now for free!