59.223 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.223 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96245 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-96244 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96243 | HIGH 7.8 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96223 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96220 | HIGH 7.8 | microsoft windows_10_1809 Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. | 0,7% | — |
| CVE-2026-96219 | CRIT 9.8 | microsoft windows_10_1809 Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-96218 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. | 0,6% | — |
| CVE-2026-96217 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96216 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96215 | HIGH 7.0 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-96209 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96207 | CRIT 10.0 | microsoft partner_center Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | 0,5% | — |
| CVE-2026-96186 | HIGH 7.8 | microsoft windows_10_1607 Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 1,7% | — |
| CVE-2026-96183 | MED 5.5 | microsoft windows_11_24h2 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2026-96118 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-96113 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-96096 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-96071 | HIGH 7.5 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | 0,6% | — |
| CVE-2026-96044 | HIGH 8.8 | microsoft sharepoint_server No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 0,7% | — |
| CVE-2026-95904 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2026-95616 | HIGH 7.5 | apache wss4j An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes | 0,4% | — |
| CVE-2026-95385 | MED 6.5 | google chrome Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-94506 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-94251 | MED 6.5 | apache sling_security A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes th | 0,4% | — |