59.497 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.497 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2026-69294 | MED 5.5 | microsoft windows_10_1809 Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-69293 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69292 | HIGH 7.0 | microsoft windows_10_1607 Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69291 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-69290 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69289 | HIGH 7.8 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 0,4% | — |
| CVE-2026-69288 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69287 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69286 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-69285 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-69284 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69283 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69282 | HIGH 8.8 | microsoft sharepoint_server Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-69281 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69280 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-6928 | CRIT 9.8 | ibm concert IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code. | 0,4% | — |
| CVE-2026-69279 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69278 | HIGH 7.8 | microsoft visual_studio_code Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 0,3% | — |
| CVE-2026-69277 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69276 | CRIT 9.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-69275 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69274 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-69273 | HIGH 8.8 | microsoft sharepoint_server Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-69272 | HIGH 7.1 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-69271 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 0,8% | — |