59.245 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.245 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2026-84439 | MED 5.3 | apache zookeeper When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters (\t) embedded in the username. Because the aud | 0,7% | — |
| CVE-2026-84436 | CRIT 9.1 | ibm guardium_data_protection IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges. | 0,7% | — |
| CVE-2026-84422 | HIGH 7.2 | ibm guardium_data_protection IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges. | 0,7% | — |
| CVE-2026-84412 | CRIT 10.0 | adobe campaign Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb | 1,2% | — |
| CVE-2026-84351 | HIGH 8.3 | google chrome Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 0,4% | — |
| CVE-2026-84334 | HIGH 8.1 | google chrome Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) | 0,1% | — |
| CVE-2026-84329 | MED 5.3 | google chrome Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-84290 | MED 5.1 | ibm guardium_data_protection IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception han | 0,1% | — |
| CVE-2026-84020 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84019 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84018 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84017 | HIGH 7.5 | microsoft windows_10_1607 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | — | — |
| CVE-2026-84016 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84015 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. | — | — |
| CVE-2026-84014 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84013 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | — | — |
| CVE-2026-84012 | HIGH 8.1 | microsoft windows_10_1607 Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | — | — |
| CVE-2026-84003 | HIGH 7.4 | microsoft azure\/msal-node Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network. | 0,6% | — |
| CVE-2026-84001 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-84000 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-83999 | HIGH 7.0 | microsoft windows_11_24h2 Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83998 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-83997 | HIGH 8.1 | microsoft windows_10_21h2 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-83996 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83995 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0,3% | — |