57.971 CVE seguite
788 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
57.971 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2019-5695 | MED 6.5 | nvidia geforce_experience NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs wit | 0,9% | — |
| CVE-2018-1356 | MED 6.1 | fortinet fortisandbox A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component. | 0,9% | — |
| CVE-2019-6595 | MED 6.1 | f5 big-ip_access_policy_manager Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI. | 0,9% | — |
| CVE-2018-15315 | MED 6.1 | f5 big-ip_access_policy_manager On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page. | 0,9% | — |
| CVE-2018-5521 | MED 6.1 | f5 big-ip_access_policy_manager On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS. | 0,9% | — |
| CVE-2016-1575 | HIGH 7.8 | canonical ubuntu_core The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory. | 0,9% | — |
| CVE-2011-1020 | MED 4.6 | linux linux_kernel The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cau | 0,9% | — |
| CVE-2026-80089 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-80088 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-80079 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-80073 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-78515 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-78503 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-72974 | MED 6.5 | microsoft 365_apps Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-72956 | MED 6.5 | microsoft 365_apps Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-72938 | MED 6.5 | microsoft 365_apps Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-58546 | MED 6.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-58539 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-58535 | MED 6.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-58533 | MED 6.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-56197 | HIGH 8.8 | microsoft windows_admin_center Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network. | 0,9% | — |
| CVE-2026-55054 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-54126 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-50504 | MED 6.5 | microsoft windows_10_1607 Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 0,9% | — |
| CVE-2026-50497 | MED 6.5 | microsoft windows_10_1607 Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. | 0,9% | — |