60.368 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.368 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-65583 | CRIT 9.1 | apache cxf Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued I | 0,3% | — |
| CVE-2026-57093 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-56187 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-54989 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-54129 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50688 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50674 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50491 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50490 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50476 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50406 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50396 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50393 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50390 | HIGH 7.0 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50359 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50358 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50307 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-35558 | HIGH 7.8 | amazon athena_odbc Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that | 0,3% | — |
| CVE-2026-31773 | HIGH 8.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_lev | 0,3% | — |
| CVE-2026-109453 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-108468 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-108465 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-108464 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-108461 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-108132 | HIGH 7.0 | microsoft windows_10_1607 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 0,3% | — |