59.696 CVE seguite
805 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
59.696 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più basso | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2021-47633 | HIGH 7.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 The bug was found during fuzzing. Stacktrace locates it in ath5k_eeprom_convert_pcal_info_5111. When none of the curve is selected in the l | 0,3% | — |
| CVE-2021-47588 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6_dev_free() from sit_init_net() ipip6_dev_free is sit dev->priv_destructor, already called by register_netdevice() if something goes wrong. Alternative would be to mak | 0,3% | — |
| CVE-2021-47393 | HIGH 7.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs. For example, setting current fan speed to 20 is used to | 0,3% | — |
| CVE-2021-47069 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to late | 0,3% | — |
| CVE-2021-46992 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets() syzbot injected | 0,3% | — |
| CVE-2021-33063 | HIGH 7.8 | intel realsense_d400_series_universal_windows_platform_driver Uncontrolled search path in the Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access. | 0,3% | — |
| CVE-2021-1371 | MED 6.6 | cisco ios_xe_sd-wan A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN confi | 0,3% | — |
| CVE-2020-10742 | MED 6.0 | linux linux_kernel A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vul | 0,3% | — |
| CVE-2019-5804 | MED 5.5 | google chrome Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name. | 0,3% | — |
| CVE-2019-1810 | MED 6.7 | cisco nx-os A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image | 0,3% | — |
| CVE-2017-6874 | HIGH 7.0 | linux linux_kernel Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior t | 0,3% | — |
| CVE-2009-4895 | MED 4.7 | canonical ubuntu_linux Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, re | 0,3% | — |
| CVE-2026-97812 | HIGH 7.0 | microsoft windows_10_21h2 Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-97810 | HIGH 7.0 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-97808 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-8546 | MED 5.3 | google chrome Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security | 0,3% | — |
| CVE-2026-8541 | MED 5.3 | google chrome Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | 0,3% | — |
| CVE-2026-85360 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83940 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-83854 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Notification allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2026-78457 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77905 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77899 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-77485 | HIGH 7.0 | microsoft sql_server_2017 Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-73022 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0,3% | — |