60.368 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.368 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2022-48830 | HIGH 8.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in | 0,3% | — |
| CVE-2022-48626 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base regist | 0,3% | — |
| CVE-2022-45857 | MED 6.5 | fortinet fortimanager An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted. | 0,3% | — |
| CVE-2022-41093 | HIGH 7.8 | microsoft windows_10 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 0,3% | — |
| CVE-2022-33744 | MED 4.7 | debian debian_linux Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, | 0,3% | — |
| CVE-2021-42265 | MED 5.5 | adobe premiere_pro Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exp | 0,3% | — |
| CVE-2021-40791 | MED 5.5 | adobe premiere_pro Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exp | 0,3% | — |
| CVE-2021-40723 | MED 5.5 | adobe acrobat Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th | 0,3% | — |
| CVE-2021-31829 | MED 5.5 | debian debian_linux kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculativ | 0,3% | — |
| CVE-2020-36312 | MED 5.5 | linux linux_kernel An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d. | 0,3% | — |
| CVE-2020-12986 | HIGH 7.8 | amd radeon_pro_software An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service. | 0,3% | — |
| CVE-2019-12731 | HIGH 7.8 | mikogo mikogo The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow local attackers to escalate privileges. | 0,3% | — |
| CVE-2019-12645 | HIGH 7.8 | cisco jabber A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper fil | 0,3% | — |
| CVE-2017-6732 | MED 6.7 | cisco prime_network A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their privileges to root privileges. More Information: CSCvd47343. Known Affected Releases: 4.2(2.1)PP1 4.2(3.0)PP6 4.3(0.0)P | 0,3% | — |
| CVE-2014-3272 | MED 6.0 | cisco tidal_enterprise_scheduler The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074. | 0,3% | — |
| CVE-2007-3851 | MED 6.0 | linux linux_kernel The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted ba | 0,3% | — |
| CVE-2006-5393 | MED 5.5 | cisco secure_desktop Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session. | 0,3% | — |
| CVE-2026-94243 | HIGH 7.3 | apache sling_security A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue. | 0,3% | — |
| CVE-2026-88194 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88188 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88182 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88181 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88100 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-88071 | HIGH 7.8 | microsoft windows_11_23h2 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-87648 | HIGH 8.3 | google chrome Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Med | 0,3% | — |