56.793 CVE seguite
777 Sfruttate ora
183 Usate dai ransomware
Ultima sincronia
Vulnerabilità Microsoft
15.479 CVE
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2025-53797 | MED 6.5 | microsoft windows_server_2008 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 1,2% | — |
| CVE-2025-53796 | MED 6.5 | microsoft windows_server_2008 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 1,2% | — |
| CVE-2002-1844 | HIGH 7.8 | microsoft windows_media_player Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges. | 1,2% | — |
| CVE-2023-35356 | HIGH 7.8 | microsoft windows_10_1607 Windows Kernel Elevation of Privilege Vulnerability | 1,2% | — |
| CVE-2024-26199 | HIGH 7.8 | microsoft 365_apps Microsoft Office Elevation of Privilege Vulnerability | 1,2% | — |
| CVE-2020-1207 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247, CVE-2020-1251, CVE-2020-1253, | 1,2% | — |
| CVE-2024-49128 | HIGH 8.1 | microsoft windows_server_2012 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. | 1,2% | — |
| CVE-2024-49119 | HIGH 8.1 | microsoft windows_server_2016 Windows Remote Desktop Services Remote Code Execution Vulnerability | 1,2% | — |
| CVE-2024-30472 | HIGH 7.5 | microsoft telemetry_dashboard Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure. | 1,2% | — |
| CVE-2022-30164 | HIGH 7.8 | microsoft windows_10 Kerberos AppContainer Security Feature Bypass Vulnerability | 1,2% | — |
| CVE-2022-38047 | HIGH 8.1 | microsoft windows_10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 1,2% | — |
| CVE-2022-33634 | HIGH 8.1 | microsoft windows_10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 1,2% | — |
| CVE-2022-30198 | HIGH 8.1 | microsoft windows_10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 1,2% | — |
| CVE-2022-24504 | HIGH 8.1 | microsoft windows_10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 1,2% | — |
| CVE-2020-1475 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticate | 1,2% | — |
| CVE-2025-29828 | HIGH 8.1 | microsoft windows_11_22h2 Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network. | 1,2% | — |
| CVE-2019-1382 | MED 5.5 | microsoft windows_10 An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'. | 1,2% | — |
| CVE-2019-0976 | MED 5.5 | microsoft nuget A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'. | 1,2% | — |
| CVE-2023-21686 | HIGH 8.8 | microsoft windows_10_1507 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2017-8694 | HIGH 7.0 | microsoft windows_10 The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privile | 1,1% | — |
| CVE-2017-8689 | HIGH 7.0 | microsoft windows_10 The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privile | 1,1% | — |
| CVE-2024-43488 | HIGH 8.8 | microsoft visual_studio_code Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector. | 1,1% | — |
| CVE-2023-29337 | HIGH 7.1 | microsoft nuget NuGet Client Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2023-21808 | HIGH 7.8 | microsoft .net .NET and Visual Studio Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2024-38053 | HIGH 8.8 | microsoft windows_10_1507 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability | 1,1% | — |