60.267 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.267 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-105241 | MED 5.3 | apache log4net Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, n | 0,8% | — |
| CVE-2026-105240 | MED 5.3 | apache log4net Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output record at that point, so everything the layout rendered after it, including except | 0,8% | — |
| CVE-2026-105239 | MED 5.3 | apache log4net Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception | 0,8% | — |
| CVE-2026-105013 | HIGH 7.4 | microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-105010 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. | 1,0% | — |
| CVE-2026-105009 | HIGH 7.5 | microsoft windows_server_2012 Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-105008 | CRIT 9.0 | microsoft windows_10_1607 No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 0,7% | — |
| CVE-2026-105007 | HIGH 8.8 | microsoft windows_10_1607 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could r | 0,9% | — |
| CVE-2026-105006 | MED 6.4 | microsoft windows_10_1607 Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0,4% | — |
| CVE-2026-105005 | HIGH 8.1 | microsoft windows_11_26h1 Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-105004 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0,4% | — |
| CVE-2026-105003 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-104714 | HIGH 8.8 | apache struts Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider | 0,7% | — |
| CVE-2026-104713 | MED 6.5 | apache struts Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to | 0,7% | — |
| CVE-2026-104712 | HIGH 7.5 | apache struts Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal (java.math.BigDecimal) property that is then rendered through the Struts tag library, the framework can produce | 0,9% | — |
| CVE-2026-104711 | CRIT 9.8 | apache struts Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject an OGN | 1,2% | — |
| CVE-2026-104348 | HIGH 7.8 | adobe photoshop Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 0,2% | — |
| CVE-2026-104347 | HIGH 7.8 | adobe photoshop Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 0,2% | — |
| CVE-2026-104346 | HIGH 7.8 | adobe photoshop Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 0,2% | — |
| CVE-2026-103829 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation | 0,1% | — |
| CVE-2026-103828 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation | 0,1% | — |
| CVE-2026-103827 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitati | 0,1% | — |
| CVE-2026-103826 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation | 0,1% | — |
| CVE-2026-103825 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction i | 0,1% | — |
| CVE-2026-103824 | MED 5.5 | adobe substance_3d_designer Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation | 0,1% | — |