59.497 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.497 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-68848 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68847 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68846 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-68845 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68844 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-68843 | MED 5.5 | microsoft windows_10_1607 Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-68842 | MED 5.5 | microsoft windows_11_24h2 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-68841 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68840 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-68839 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-68838 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68837 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68835 | HIGH 7.1 | microsoft windows_10_1607 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. | 0,6% | — |
| CVE-2026-68834 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68833 | MED 6.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | 0,4% | — |
| CVE-2026-68832 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68831 | MED 5.5 | microsoft windows_10_1607 Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. | 0,6% | — |
| CVE-2026-68830 | MED 5.5 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-68828 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-68827 | HIGH 8.0 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-68825 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68824 | HIGH 7.0 | microsoft windows_10_21h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-68823 | CRIT 9.1 | microsoft azure_confidential_ledger Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-68821 | HIGH 7.3 | microsoft app_installer Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68819 | MED 5.9 | microsoft windows_10_1607 Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. | 1,0% | — |