59.398 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.398 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2026-72993 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-72992 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-72991 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-72990 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-72989 | HIGH 7.5 | microsoft windows_10_1809 Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-72988 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-72987 | HIGH 8.1 | microsoft windows_10_1607 Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-72986 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-72985 | MED 6.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. | 0,4% | — |
| CVE-2026-72984 | HIGH 8.8 | microsoft edge_chromium Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-72983 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-72982 | CRIT 9.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-72981 | HIGH 8.1 | microsoft windows_10_1607 Use after free in IP Helper allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-72980 | MED 4.4 | microsoft windows_10_1607 Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. | 0,6% | — |
| CVE-2026-72979 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-72978 | MED 5.9 | microsoft windows_10_1607 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 1,0% | — |
| CVE-2026-72977 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-72976 | MED 5.0 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. | 0,5% | — |
| CVE-2026-72975 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-72974 | MED 6.5 | microsoft 365_apps Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-72973 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-72972 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-72971 | MED 5.5 | microsoft windows_11_26h1 Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 0,4% | — |
| CVE-2026-72970 | HIGH 8.3 | microsoft edge_chromium Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-72967 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | 0,3% | — |