59.529 CVE seguite
803 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.529 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più basso | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2026-96209 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-95638 | HIGH 7.8 | adobe photoshop Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 0,2% | — |
| CVE-2026-88079 | HIGH 7.0 | microsoft windows_11_24h2 Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-88076 | HIGH 7.0 | microsoft windows_10_1607 Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85918 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85826 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85823 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85810 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85803 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-85372 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-7976 | HIGH 7.5 | google chrome Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium) | 0,2% | — |
| CVE-2026-7965 | LOW 3.1 | google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | 0,2% | — |
| CVE-2026-69430 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-69410 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2026-5890 | MED 5.3 | google chrome Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium) | 0,2% | — |
| CVE-2026-20007 | MED 5.8 | cisco secure_firewall_threat_defense A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been d | 0,2% | — |
| CVE-2026-13029 | HIGH 7.5 | google chrome Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) | 0,2% | — |
| CVE-2026-1262 | MED 4.3 | ibm infosphere_information_server IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability. | 0,2% | — |
| CVE-2026-12011 | HIGH 8.3 | google chrome Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) | 0,2% | — |
| CVE-2026-12008 | HIGH 8.3 | google chrome Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) | 0,2% | — |
| CVE-2025-71159 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_node() set the delayed_node's refcount before acquiring the root->delayed_node | 0,2% | — |
| CVE-2025-62573 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. | 0,2% | — |
| CVE-2025-62189 | MED 4.3 | secuavail logstare_collector LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request. | 0,2% | — |
| CVE-2025-61955 | HIGH 8.8 | f5 f5os-a A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached | 0,2% | — |
| CVE-2025-58424 | MED 5.3 | f5 big-ip_access_policy_manager On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | 0,2% | — |