60.282 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
Vulnerabilità sfruttate attivamente
809 CVE
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2019-0880 | HIGH 7.8 | microsoft windows_10_1507 A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. | 2,3% | |
| CVE-2025-53521 | CRIT 9.8 | f5 big-ip_access_policy_manager When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | 2,3% | |
| CVE-2025-21391 | HIGH 7.1 | microsoft windows_10_1507 Windows Storage Elevation of Privilege Vulnerability | 2,3% | |
| CVE-2025-24993 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 2,2% | |
| CVE-2017-12232 | MED 6.5 | cisco ios A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a d | 2,2% | |
| CVE-2026-76519 | CRIT 9.8 | cisco asyncos A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of ema | 2,2% | |
| CVE-2025-21418 | HIGH 7.8 | microsoft windows_10_1607 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2,1% | |
| CVE-2017-6663 | MED 6.5 | cisco ios A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. Mo | 2,1% | |
| CVE-2025-24991 | MED 5.5 | microsoft windows_10_1507 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 2,0% | |
| CVE-2017-12238 | MED 6.5 | cisco ios A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resultin | 2,0% | |
| CVE-2025-0111 | MED 6.5 | paloaltonetworks pan-os An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can gre | 2,0% | |
| CVE-2025-24984 | MED 4.6 | microsoft windows_10_1507 Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | 2,0% | |
| CVE-2026-102489 | CRIT 9.8 | zammad zammad Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework. | 2,0% | |
| CVE-2025-30400 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | 1,9% | |
| CVE-2022-41091 | MED 5.4 | ransomware microsoft windows_10_1507 Windows Mark of the Web Security Feature Bypass Vulnerability | 1,9% | |
| CVE-2022-41033 | HIGH 7.8 | microsoft windows_10_1507 Windows COM+ Event System Service Elevation of Privilege Vulnerability | 1,9% | |
| CVE-2019-0797 | HIGH 7.8 | microsoft windows_10_1507 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808. | 1,9% | |
| CVE-2025-24983 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 1,9% | |
| CVE-2025-32709 | HIGH 7.8 | microsoft windows_10_1507 Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 1,8% | |
| CVE-2019-1129 | HIGH 7.8 | ransomware microsoft windows_10_1703 An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130. | 1,8% | |
| CVE-2025-21590 | MED 4.4 | juniper junos An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrar | 1,7% | |
| CVE-2026-0322 | HIGH 7.2 | paloaltonetworks pan-os A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by t | 1,7% | |
| CVE-2019-1130 | HIGH 7.8 | ransomware microsoft windows_10_1507 An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129. | 1,7% | |
| CVE-2023-28229 | HIGH 7.0 | microsoft windows_10_1507 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | 1,7% | |
| CVE-2024-38107 | HIGH 7.8 | microsoft windows_10_1507 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | 1,6% |