59.988 CVE seguite
807 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.988 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2021-26100 | MED 5.9 | fortinet fortimail A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaint | 0,3% | — |
| CVE-2020-4414 | MED 4.4 | ibm db2 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an | 0,3% | — |
| CVE-2020-3393 | MED 6.0 | cisco ios_xe A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem | 0,3% | — |
| CVE-2017-0318 | MED 5.5 | nvidia gpu_driver All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system. | 0,3% | — |
| CVE-2011-1016 | LOW 1.9 | linux linux_kernel The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Transla | 0,3% | — |
| CVE-2009-1883 | MED 4.4 | linux linux_kernel The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage. | 0,3% | — |
| CVE-2007-5498 | MED 4.9 | linux linux_kernel The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large | 0,3% | — |
| CVE-2026-83932 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83883 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83882 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83881 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83876 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70285 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70121 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70114 | HIGH 7.8 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70102 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70093 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69471 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69354 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-68836 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-22745 | MED 5.3 | vmware spring_framework Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * | 0,3% | — |
| CVE-2026-20806 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2025-8010 | HIGH 8.8 | google chrome Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 0,3% | — |
| CVE-2025-69267 | MED 6.5 | broadcom dx_netops_spectrum Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier. | 0,3% | — |
| CVE-2025-58692 | HIGH 8.8 | fortinet fortivoice An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized cod | 0,3% | — |