59.356 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.356 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-69834 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69832 | MED 5.6 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69829 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-69827 | HIGH 8.1 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. | 0,5% | — |
| CVE-2026-69826 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-69824 | CRIT 9.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-69822 | HIGH 7.8 | microsoft windows_10_1809 Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69821 | HIGH 7.8 | microsoft windows_10_1607 Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69820 | HIGH 8.2 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69819 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-69818 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69817 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69816 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69814 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69813 | HIGH 8.1 | microsoft windows_10_1607 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-69809 | HIGH 7.5 | microsoft windows_11_23h2 Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-69808 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69807 | HIGH 8.0 | microsoft windows_10_1607 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network. | 0,9% | — |
| CVE-2026-69806 | HIGH 7.0 | microsoft .net Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 0,8% | — |
| CVE-2026-69805 | HIGH 7.5 | microsoft microsoft.diagnostics.runtime External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. | 0,5% | — |
| CVE-2026-69804 | HIGH 7.5 | microsoft sharepoint_server Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 0,5% | — |
| CVE-2026-69803 | MED 5.9 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | 0,8% | — |
| CVE-2026-69801 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69799 | HIGH 7.8 | microsoft windows_10_21h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-69797 | HIGH 8.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 0,8% | — |