59.223 CVE seguite
800 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.223 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2026-71341 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. | 0,4% | — |
| CVE-2026-71340 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71339 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71338 | MED 6.4 | microsoft windows_10_1607 Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71337 | HIGH 7.8 | microsoft windows_10_21h2 Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71336 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-71334 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71333 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71332 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-71331 | HIGH 8.1 | microsoft windows_10_1809 Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. | 0,7% | — |
| CVE-2026-71330 | HIGH 7.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-71329 | MED 6.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | 0,4% | — |
| CVE-2026-71328 | HIGH 8.8 | microsoft .net Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-71300 | CRIT 9.8 | apache camel Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which | 0,7% | — |
| CVE-2026-71290 | CRIT 9.1 | apache httpclient Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between th | 0,3% | — |
| CVE-2026-71257 | HIGH 7.5 | apache wicket Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket f | 0,7% | — |
| CVE-2026-70587 | HIGH 7.5 | microsoft windows_10_1607 Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-70586 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. | 0,8% | — |
| CVE-2026-70585 | HIGH 7.0 | microsoft windows_server_2012 Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. | 0,3% | — |
| CVE-2026-70584 | HIGH 7.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70583 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70582 | MED 6.4 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-70581 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70579 | HIGH 7.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. | 1,0% | — |
| CVE-2026-70578 | HIGH 7.0 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally. | 0,3% | — |