58.912 CVE seguite
800 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
58.912 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-77891 | MED 6.4 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-77890 | HIGH 7.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77889 | HIGH 7.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77888 | HIGH 7.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77887 | MED 6.4 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-77886 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-7755 | HIGH 8.8 | langflow langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files. | 0,7% | — |
| CVE-2026-7754 | HIGH 7.7 | langflow langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism. | 0,3% | — |
| CVE-2026-77505 | HIGH 8.1 | microsoft windows_10_1607 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-77504 | HIGH 8.8 | microsoft windows_10_1607 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-77503 | HIGH 8.4 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77502 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77501 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77500 | HIGH 7.8 | microsoft windows_10_1607 Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77499 | HIGH 7.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77498 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77495 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-77494 | HIGH 7.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 1,2% | — |
| CVE-2026-77493 | CRIT 9.8 | microsoft windows_10_1607 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 1,0% | — |
| CVE-2026-77492 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-77491 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-77490 | MED 6.1 | microsoft edge_chromium Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0,4% | — |
| CVE-2026-77489 | HIGH 7.8 | microsoft windows_10_1607 Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77488 | MED 5.5 | microsoft sql_server_2017 Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-77487 | HIGH 8.8 | microsoft sql_server_2017 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 0,8% | — |