60.304 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.304 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2021-1233 | MED 4.4 | cisco catalyst_sd-wan_manager A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An at | 0,3% | — |
| CVE-2020-3990 | MED 6.5 | vmware horizon_client VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able t | 0,3% | — |
| CVE-2020-3477 | MED 5.5 | cisco ios A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution | 0,3% | — |
| CVE-2020-3396 | MED 6.8 | cisco ios_xe A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sensitive areas of the file system, including the namespace conta | 0,3% | — |
| CVE-2020-3394 | HIGH 7.8 | cisco nx-os A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To e | 0,3% | — |
| CVE-2020-1682 | MED 5.5 | juniper junos An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuo | 0,3% | — |
| CVE-2008-4914 | MED 4.7 | vmware esx Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host crash) via a snapshot with a malformed VMDK delta disk. | 0,3% | — |
| CVE-2026-97009 | HIGH 7.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-96996 | HIGH 7.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-83837 | HIGH 7.8 | microsoft windows_10_1607 Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83792 | HIGH 7.8 | microsoft windows_10_21h2 Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83791 | HIGH 7.8 | microsoft windows_10_1809 Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83654 | HIGH 7.8 | microsoft windows_10_21h2 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83586 | HIGH 7.8 | microsoft windows_11_23h2 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-80093 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69945 | HIGH 8.8 | microsoft windows_10_21h2 Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69771 | MED 4.7 | microsoft windows_11_23h2 Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally. | 0,3% | — |
| CVE-2026-3921 | HIGH 8.8 | google chrome Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 0,3% | — |
| CVE-2026-32200 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-31712 | HIGH 8.3 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check_perm_dacl() only guard against an under-sized remaining buffer, not against an ACE whose declared `a | 0,3% | — |
| CVE-2025-71311 | HIGH 8.2 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSAN reports an uninitialized value in longest_match_std(), invoked from ntfs_compress_write(). When new folios are allocated without being marked | 0,3% | — |
| CVE-2025-20180 | MED 4.8 | cisco asyncos A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user o | 0,3% | — |
| CVE-2024-53171 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in TNC, the tree might split and cause a node to change its `znode->parent`. A further deletion of other | 0,3% | — |
| CVE-2024-47443 | HIGH 7.8 | adobe after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must | 0,3% | — |
| CVE-2024-47442 | HIGH 7.8 | adobe after_effects After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must | 0,3% | — |