60.383 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.383 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2025-21400 | HIGH 8.0 | microsoft sharepoint_server Microsoft SharePoint Server Remote Code Execution Vulnerability | 34,2% | — |
| CVE-2025-2140 | MED 5.7 | ibm engineering_requirements_management_doors_next IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data. | 0,1% | — |
| CVE-2025-21399 | HIGH 7.4 | microsoft edge_update Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2025-21397 | HIGH 7.8 | microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2025-21396 | HIGH 8.2 | microsoft account Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network. | 0,7% | — |
| CVE-2025-21395 | HIGH 7.8 | microsoft 365_apps Microsoft Access Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2025-21394 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2025-21393 | MED 6.3 | microsoft sharepoint_server Microsoft SharePoint Server Spoofing Vulnerability | 1,1% | — |
| CVE-2025-21392 | HIGH 7.8 | microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2025-21390 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2025-2139 | LOW 3.5 | ibm engineering_requirements_management_doors_next IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security. | 0,2% | — |
| CVE-2025-21389 | HIGH 7.5 | microsoft windows_10_1507 Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network. | 2,0% | — |
| CVE-2025-21387 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2025-21386 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 0,8% | — |
| CVE-2025-21385 | HIGH 8.8 | microsoft purview A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network. | 28,1% | — |
| CVE-2025-21384 | HIGH 8.3 | microsoft azure_health_bot An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. | 0,7% | — |
| CVE-2025-21383 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Information Disclosure Vulnerability | 1,0% | — |
| CVE-2025-21382 | HIGH 7.8 | microsoft windows_10_1809 Windows Graphics Component Elevation of Privilege Vulnerability | 0,5% | — |
| CVE-2025-21381 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2025-21380 | HIGH 8.8 | microsoft azure_marketplace Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network. | 1,5% | — |
| CVE-2025-2138 | LOW 3.5 | ibm engineering_requirements_management_doors_next IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security. | 0,2% | — |
| CVE-2025-21379 | HIGH 7.1 | microsoft windows_11_24h2 DHCP Client Service Remote Code Execution Vulnerability | 0,9% | — |
| CVE-2025-21378 | HIGH 7.8 | microsoft windows_10_1507 Windows CSC Service Elevation of Privilege Vulnerability | 0,6% | — |
| CVE-2025-21377 | MED 6.5 | microsoft windows_10_1507 NTLM Hash Disclosure Spoofing Vulnerability | 39,9% | — |
| CVE-2025-21376 | HIGH 8.1 | microsoft windows_10_1507 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 9,3% | — |