59.223 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.223 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2026-88074 | HIGH 7.8 | microsoft windows_11_23h2 Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88073 | HIGH 8.8 | microsoft windows_10_21h2 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88072 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. | 0,4% | — |
| CVE-2026-88071 | HIGH 7.8 | microsoft windows_11_23h2 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88070 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-87976 | HIGH 8.1 | apache nifi Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem pa | 0,8% | — |
| CVE-2026-87830 | CRIT 9.1 | apache wss4j In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signatu | 0,2% | — |
| CVE-2026-87716 | HIGH 7.5 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. | 1,1% | — |
| CVE-2026-87715 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-87714 | MED 6.5 | microsoft windows_10_1607 Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. | 0,5% | — |
| CVE-2026-87713 | HIGH 7.5 | microsoft windows_10_1607 Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. | 0,3% | — |
| CVE-2026-87712 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-87711 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-87710 | HIGH 7.0 | microsoft windows_10_1607 Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 0,1% | — |
| CVE-2026-87701 | CRIT 9.6 | microsoft azure_cosmos_db Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network. | 0,8% | — |
| CVE-2026-87654 | CRIT 9.6 | google chrome Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 0,5% | — |
| CVE-2026-87653 | MED 5.4 | google chrome UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-87648 | HIGH 8.3 | google chrome Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Med | 0,4% | — |
| CVE-2026-87644 | HIGH 8.3 | google chrome Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted H | 0,4% | — |
| CVE-2026-87621 | CRIT 9.6 | google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 0,5% | — |
| CVE-2026-87618 | HIGH 8.3 | google chrome Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu | 0,4% | — |
| CVE-2026-87616 | HIGH 8.3 | google chrome Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted H | 0,4% | — |
| CVE-2026-87602 | MED 4.7 | google chrome Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-87585 | HIGH 8.8 | google chrome Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) | 0,4% | — |
| CVE-2026-87554 | HIGH 8.1 | google chrome Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) | 0,1% | — |