Vulnerabilidades exploráveis hoje
412,645na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H6
Exploit Today ≥ 701,703
Distribuição · última janela
- Crítica5,634
- Alta22,161
- Média20,546
- Baixa2,120
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1094856.3 MÉD—
——0Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.3hCVE-2026-1094817.5 ALT—
——0Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.3hCVE-2026-1094787.5 ALT—
——0Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.3hCVE-2026-1094766.1 MÉD—
——0Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1094757.5 ALT—
——0Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.3hCVE-2026-1094737.8 ALT—
——0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.3hCVE-2026-1094728.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.3hCVE-2026-1094679.9 CRÍ—
——0Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.3hCVE-2026-1094668.0 ALT—
——0Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.3hCVE-2026-1094648.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.3hCVE-2026-1094638.8 ALT—
——0Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.3hCVE-2026-1094624.4 MÉD—
——0Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.3hCVE-2026-1094605.5 MÉD—
——0Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally.3hCVE-2026-1094598.1 ALT—
——0Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.3hCVE-2026-1094578.0 ALT—
——0Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.3hCVE-2026-1094564.6 MÉD—
——0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.3hCVE-2026-1094556.5 MÉD—
——0Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.3hCVE-2026-1094549.0 CRÍ—
——0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.3hCVE-2026-1084706.5 MÉD—
——0Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084696.8 MÉD—
——0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.3hCVE-2026-1084255.9 MÉD—
——0Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084246.5 MÉD—
——0Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084234.7 MÉD—
——0Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.3hCVE-2026-1084217.5 ALT—
——0Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.3hCVE-2026-1253205.3 MÉD—
——0pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the HTTP transport did not validate the Origin header on incoming requests. A user who visited an attacker-controlled page could be targeted through DNS rebinding, allowing the page to reach a locally running server and read schemas and query results from configured databases. The issue affected deployments with the HTTP transport enabled on a machine that also ran a browser, while the default stdio transport was not reachable through this path. This issue is fixed in version 1.1.0.4hCVE-2026-1084196.5 MÉD—
——0Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084186.5 MÉD—
——0Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084176.5 MÉD—
——0Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1084166.8 MÉD—
——0Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.3hCVE-2026-1084156.8 MÉD—
——0Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.3hCVE-2026-1084147.0 ALT—
——0Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.3hCVE-2026-1084137.0 ALT—
——0Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.3hCVE-2026-1084127.8 ALT—
——0Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.3hCVE-2026-1084118.8 ALT—
——0Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.3hCVE-2026-1084105.5 MÉD—
——0Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.3hCVE-2026-1084095.5 MÉD—
——0Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.3hCVE-2026-1084085.5 MÉD—
——0Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.3hCVE-2026-1084077.8 ALT—
——0Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally.3hCVE-2026-1084067.0 ALT—
——0Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.3hCVE-2026-1084057.8 ALT—
——0Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.3h