59.497 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.497 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-96851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96850 | MED 5.5 | microsoft windows_10_1809 Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96849 | MED 5.5 | microsoft windows_11_26h1 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96848 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96321 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96314 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-85815 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-85794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-85374 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-85336 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-83870 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-20353 | CRIT 9.8 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software har | 0,4% | — |
| CVE-2026-20073 | MED 5.8 | cisco adaptive_security_appliance_software A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device. Thi | 0,4% | — |
| CVE-2026-20009 | MED 5.3 | cisco adaptive_security_appliance_software A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to log in to a Cisco Secure Firewall ASA de | 0,4% | — |
| CVE-2026-102187 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2024-53141 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefor | 0,4% | — |
| CVE-2024-35998 | HIGH 7.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that the cifs_sync_mid_result function could deadlock "Thread deadlock (ORDER_REVERSAL) lock_order: Calli | 0,4% | — |
| CVE-2023-36565 | HIGH 7.0 | microsoft 365_copilot Microsoft Office Graphics Elevation of Privilege Vulnerability | 0,4% | — |
| CVE-2023-25874 | HIGH 7.8 | adobe substance_3d_stager Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v | 0,4% | — |
| CVE-2023-25868 | HIGH 7.8 | adobe substance_3d_stager Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v | 0,4% | — |
| CVE-2023-25864 | HIGH 7.8 | adobe substance_3d_stager Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v | 0,4% | — |
| CVE-2023-22243 | HIGH 7.8 | adobe animate Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact | 0,4% | — |
| CVE-2023-22236 | HIGH 7.8 | adobe animate Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti | 0,4% | — |
| CVE-2023-22234 | HIGH 7.8 | adobe premiere_rush Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus | 0,4% | — |