CVE Tracker

59.329 CVE

Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.

CVE Tracker
Identificativo	Gravità, ordina dal più alto	Prodotto e difetto	EPSS, ordina dal più alto	In KEV dal, ordinato dal più basso
CVE-2026-81981	HIGH 7.8	adobe acrobat Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,3%	—
CVE-2026-81980	HIGH 7.8	adobe acrobat Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,3%	—
CVE-2026-81979	HIGH 7.8	adobe acrobat Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,3%	—
CVE-2026-81978	MED 5.5	adobe acrobat Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a	0,3%	—
CVE-2026-81977	MED 5.5	adobe acrobat Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user i	0,3%	—
CVE-2026-81976	HIGH 7.8	adobe acrobat Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,4%	—
CVE-2026-81975	HIGH 7.8	adobe acrobat Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,4%	—
CVE-2026-81973	HIGH 7.8	adobe acrobat Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	0,4%	—
CVE-2026-81960	HIGH 7.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81959	HIGH 7.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81958	MED 5.5	microsoft 365_apps Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	0,5%	—
CVE-2026-81957	HIGH 7.8	microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81956	HIGH 7.8	microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81954	HIGH 7.8	microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81953	HIGH 7.8	microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81952	HIGH 8.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.	0,8%	—
CVE-2026-81951	HIGH 7.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81950	HIGH 7.8	microsoft 365_apps Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81949	HIGH 7.8	microsoft 365_apps Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81948	HIGH 7.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81947	HIGH 7.8	microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	0,5%	—
CVE-2026-81930	MED 6.3	apache apache-airflow-providers-snowflake Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `https://{account}.snowflakecomputing.com/api/v2/statements`, so an `account` valu	0,4%	—
CVE-2026-81914	MED 4.3	apache apache-airflow-providers-google Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quote character that delimits them. A name containing an apostrophe therefore termin	0,5%	—
CVE-2026-81866	MED 4.3	apache nifi Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration ste	0,6%	—
CVE-2026-81862	MED 6.5	apache apache-airflow-providers-teradata Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperator` and `AzureBlobStorageToTeradataOperator` interpolate the source bucket's credentials as plain string literals into the `CREATE MULTISET T	0,4%	—