60.368 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.368 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-83644 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83584 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-79177 | MED 6.5 | google chrome Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-70272 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70252 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70150 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70136 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70115 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70086 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-69425 | MED 4.7 | microsoft windows_11_23h2 Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally. | 0,3% | — |
| CVE-2026-5867 | MED 4.3 | google chrome Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | 0,3% | — |
| CVE-2026-47304 | HIGH 8.1 | microsoft .net Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 0,3% | — |
| CVE-2026-45638 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-45637 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-45605 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-45600 | HIGH 7.8 | microsoft windows_11_24h2 Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-45593 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-45592 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-42983 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-42910 | HIGH 7.8 | microsoft windows_11_24h2 Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-41081 | MED 6.5 | apache storm Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is enabled in Apache Storm without requiring client certificate authentication (th | 0,3% | — |
| CVE-2026-32156 | HIGH 7.4 | microsoft windows_10_1607 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-27924 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-26153 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-11004 | MED 5.3 | google chrome Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium) | 0,3% | — |