60.267 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.267 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più basso | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2019-16149 | MED 5.5 | fortinet forticlientems An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unauthorized code by injecting malicious payload in the user profile of a FortiClient instance being managed by the vulnerable | 0,3% | — |
| CVE-2019-15967 | MED 4.4 | cisco roomos A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug | 0,3% | — |
| CVE-2016-3684 | MED 4.7 | sap download_manager SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338. | 0,3% | — |
| CVE-2005-3106 | MED 4.7 | canonical ubuntu_linux Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an | 0,3% | — |
| CVE-2026-48354 | MED 6.2 | adobe c2pa CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Explo | 0,3% | — |
| CVE-2026-28726 | MED 4.3 | acronis cyber_protect Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. | 0,3% | — |
| CVE-2026-28724 | MED 4.3 | acronis cyber_protect Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. | 0,3% | — |
| CVE-2026-24216 | HIGH 7.8 | nvidia bionemo_framework NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. | 0,3% | — |
| CVE-2026-14122 | HIGH 8.1 | google chrome Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-102208 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102197 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102195 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102194 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102193 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102191 | HIGH 7.0 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-102189 | HIGH 7.0 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-100225 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-100216 | HIGH 7.0 | microsoft windows_10_1809 Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2025-54105 | HIGH 7.0 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2025-39932 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) In smbd_destroy() we may destroy the memory so we better wait until post_send_credits_work is no longer | 0,3% | — |
| CVE-2025-10201 | HIGH 8.8 | google chrome Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High) | 0,3% | — |
| CVE-2024-53239 | HIGH 7.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the resources right after the call of usb6fire_chip_abort(). But at this moment, the card object might | 0,3% | — |
| CVE-2024-49960 | HIGH 7.8 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem e | 0,3% | — |
| CVE-2024-47742 | HIGH 7.8 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers o | 0,3% | — |
| CVE-2024-40995 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in the syzbot bug. When a request to a | 0,3% | — |