57.954 CVE seguite
784 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
57.954 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più basso | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2022-3624 | LOW 3.5 | linux linux_kernel A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlb_arp_xmit of the file drivers/net/bonding/bond_alb.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a | 0,3% | — |
| CVE-2022-3202 | HIGH 7.1 | linux linux_kernel A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information. | 0,3% | — |
| CVE-2022-0264 | MED 5.5 | linux linux_kernel A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak interna | 0,3% | — |
| CVE-2021-47652 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:fb_destroy_modelist | 0,3% | — |
| CVE-2021-47638 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ubifs: rename_whiteout: Fix double free for whiteout_ui->data 'whiteout_ui->data' will be freed twice if space budget fail for rename whiteout operation as following process: rename_whiteou | 0,3% | — |
| CVE-2021-47598 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzbot was able to trigge | 0,3% | — |
| CVE-2021-47432 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in particular | 0,3% | — |
| CVE-2021-47327 | HIGH 7.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails arm_smmu_rpm_get() invokes pm_runtime_get_sync(), which increases the refcount of the "smmu" even though the ret | 0,3% | — |
| CVE-2021-47063 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drm_connector_cleanup() manually in panel_bridge_detach(), the connector will be cleaned up with the other DRM objects | 0,3% | — |
| CVE-2021-38200 | MED 5.5 | linux linux_kernel arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service (perf_instruction_pointer NULL pointer dereference and OOP | 0,3% | — |
| CVE-2021-38086 | HIGH 7.8 | acronis cyber_protect Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking. | 0,3% | — |
| CVE-2021-23020 | MED 5.5 | f5 nginx_controller The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys. | 0,3% | — |
| CVE-2021-20239 | LOW 3.3 | fedoraproject fedora A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality. | 0,3% | — |
| CVE-2021-0121 | HIGH 7.8 | intel iris_xe_max_dedicated_graphics Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access. | 0,3% | — |
| CVE-2021-0061 | HIGH 7.8 | intel graphics_drivers Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of privilege via local access. | 0,3% | — |
| CVE-2017-6781 | MED 5.3 | cisco policy_suite A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root le | 0,3% | — |
| CVE-2026-8018 | HIGH 8.1 | google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-64441 | HIGH 8.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Three IE/attribute parsing functions have missing bounds checks. rtw_get_sec_ie() and rtw_ge | 0,3% | — |
| CVE-2026-54125 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50689 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50677 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50458 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50457 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50427 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-50385 | HIGH 8.8 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0,3% | — |