EN
59.463 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia

CVE Tracker

59.463 CVE

Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.

CVE Tracker
Identificativo Gravità, ordina dal più alto Prodotto e difetto EPSS, ordinato dal più alto In KEV dal, ordina dal più alto
CVE-2008-2099 MED 6.9 vmware ace_2 Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified ve 0,4% —
CVE-2008-0779 HIGH 7.2 fortinet forticlient_host_security The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request. 0,4% —
CVE-2007-2525 MED 4.9 linux linux_kernel Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is 0,4% —
CVE-2007-1592 MED 4.9 linux linux_kernel net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, a 0,4% —
CVE-2002-1976 LOW 2.1 linux linux_kernel ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstra 0,4% —
CVE-2026-87648 HIGH 8.3 google chrome Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Med 0,4% —
CVE-2026-87524 HIGH 8.3 google chrome Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High 0,4% —
CVE-2026-83501 MED 5.5 microsoft windows_11_23h2 Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-7899 HIGH 8.8 google chrome Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) 0,4% —
CVE-2026-78952 HIGH 8.3 google chrome Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) 0,4% —
CVE-2026-78454 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-77492 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-77488 MED 5.5 microsoft sql_server_2017 Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-72945 MED 5.5 microsoft windows_10_1607 Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-72937 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-71341 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-70290 MED 5.5 microsoft windows_10_1607 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-70145 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69808 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69794 MED 5.5 microsoft windows_10_1607 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69770 MED 5.5 microsoft windows_10_1607 Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69741 MED 5.5 microsoft windows_10_21h2 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69672 MED 5.5 microsoft windows_10_1607 Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69627 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. 0,4% —
CVE-2026-69618 MED 5.5 microsoft windows_10_1607 Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. 0,4% —