56.855 CVE seguite
777 Sfruttate ora
183 Usate dai ransomware
Ultima sincronia
CVE Tracker
56.855 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2025-49725 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2025-49724 | HIGH 8.8 | microsoft windows_10_1809 Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network. | 7,8% | — |
| CVE-2025-49723 | HIGH 8.8 | microsoft windows_10_1809 Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally. | 0,3% | — |
| CVE-2025-49722 | MED 5.7 | microsoft windows_10_1507 Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network. | 0,5% | — |
| CVE-2025-49721 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally. | 0,5% | — |
| CVE-2025-49719 | HIGH 7.5 | microsoft sql_server_2016 Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. | 10,5% | — |
| CVE-2025-49718 | HIGH 7.5 | microsoft sql_server_2019 Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network. | 3,3% | — |
| CVE-2025-49717 | HIGH 8.5 | microsoft sql_server_2019 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 1,0% | — |
| CVE-2025-49716 | HIGH 7.5 | microsoft windows_server_2008 Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network. | 1,4% | — |
| CVE-2025-49715 | HIGH 7.5 | microsoft dynamics_365 Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network. | 0,7% | — |
| CVE-2025-49714 | HIGH 7.8 | microsoft python Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally. | 0,4% | — |
| CVE-2025-49713 | HIGH 8.8 | microsoft edge_chromium Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2025-49712 | HIGH 8.8 | microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 19,6% | — |
| CVE-2025-49711 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0,5% | — |
| CVE-2025-49708 | CRIT 9.9 | microsoft windows_10_1809 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. | 1,2% | — |
| CVE-2025-49707 | HIGH 7.9 | microsoft dcadsv5-series_azure_vm_firmware Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally. | 0,4% | — |
| CVE-2025-49705 | HIGH 7.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 0,4% | — |
| CVE-2025-49703 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0,6% | — |
| CVE-2025-49702 | HIGH 7.8 | microsoft 365_apps Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | 0,6% | — |
| CVE-2025-49701 | HIGH 8.8 | microsoft sharepoint_server Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 1,1% | — |
| CVE-2025-49700 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0,4% | — |
| CVE-2025-49699 | HIGH 7.0 | microsoft 365_apps Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 0,3% | — |
| CVE-2025-49698 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0,6% | — |
| CVE-2025-49697 | HIGH 8.4 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 0,5% | — |
| CVE-2025-49696 | HIGH 8.4 | microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 0,6% | — |