59.497 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.497 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-68893 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-68892 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68891 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2026-68890 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68889 | HIGH 7.1 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-68888 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68887 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-68886 | MED 5.5 | microsoft windows_10_1607 Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-68885 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68884 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68881 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-68880 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68878 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68877 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-68876 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68875 | HIGH 7.8 | microsoft windows_10_1607 Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-68874 | MED 5.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-68873 | MED 5.5 | microsoft windows_11_23h2 Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-68872 | MED 6.5 | apache apache-airflow-providers-amazon The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mo | 0,6% | — |
| CVE-2026-68871 | MED 6.5 | apache apache-airflow-providers-apache-yandex The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in | 0,4% | — |
| CVE-2026-68868 | MED 6.5 | apache apache-airflow-providers-google The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every | 0,6% | — |
| CVE-2026-68852 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-68851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-68850 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68849 | MED 4.7 | microsoft windows_10_21h2 Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. | 0,3% | — |