EN
60.340 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia

Vulnerabilità sfruttate attivamente

809 CVE

Vulnerabilità sfruttate attivamente
Identificativo Gravità, ordina dal più alto Prodotto e difetto EPSS, ordina dal più alto In KEV dal, ordina dal più alto
CVE-2021-0920 MED 6.4 debian debian_linux In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: 0,9%
CVE-2026-102490 HIGH 7.8 zammad zammad Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as 0,9%
CVE-2024-50302 MED 5.5 debian debian_linux In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be 0,8%
CVE-2026-41709 LOW 2.7 vmware esxi VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. 0,8%
CVE-2026-53362 HIGH 7.8 linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are co 0,7%
CVE-2026-81963 HIGH 7.8 microsoft windows_11_23h2 Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. 0,4%
CVE-2026-85880 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. 0,4%
CVE-2026-56155 HIGH 7.8 microsoft windows_10_1607 Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. 0,3%
CVE-2026-87886 HIGH 7.8 acronis acronis_backup Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin 0,2%