CVE Watch412.645 no arquivo completo

Vulnerabilidades exploráveis hoje

412,645na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,779

Novos KEV · 24H6

Exploit Today ≥ 701,703

Distribuição · última janela

Crítica
5,634
Alta
22,161
Média
20,546
Baixa
2,120

Filtros

Janela

Severidade

Filtros

Vulnerabilidades412,481–412,520 · 412,645

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-34774—

—

——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.22d CVE-2025-34773—

—

——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.22d CVE-2026-31688—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.25d CVE-2018-4811—

—

——0Rejected reason: This candidate is unused by its CNA.24d CVE-2018-4735—

—

——0Rejected reason: This candidate is unused by its CNA.24d CVE-2026-24862—

—

——0Rejected reason: Not used24d CVE-2017-4140—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none24d CVE-2026-65218—

—

——0Rejected reason: The reported issue is tracked under CVE-2026-18451. This CVE ID is rejected as a duplicate.15d CVE-2026-41221—

—

——0Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4h CVE-2026-65221—

—

——0Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA.15d CVE-2026-41224—

—

——0Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4h CVE-2026-42056—

—

——0Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-42956—

—

——0Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-1084018.8 ALT

—

——0Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.3h CVE-2026-107496—

—

——0Issue summary: Encrypting a CMS message to an EC certificate whose group order is 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely. Impact summary: An attacker able to supply the recipient certificate to an application performing CMS encryption can cause that application to loop indefinitely, consuming CPU and resulting in Denial of Service. CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') Description: CMS_encrypt() and CMS_encrypt_ex() encrypt a message to one or more recipient certificates and, for an EC recipient, generate an ephemeral key in the recipient's group. If the certificate declares a group order of 1, random scalar generation can only produce zero. The key generation routine then retries without limit while waiting for a nonzero private scalar, so the call never returns. The OpenSSL TLS and QUIC implementations do not use this path. An application is exposed only if it calls CMS_encrypt() or CMS_encrypt_ex() with a recipient certificate whose EC parameters are attacker-controlled. Certificates with normal EC group orders do not trigger the loop. OpenSSL 4.0 and later reject unknown explicit EC groups in default builds. These versions are affected only when configured with the enable-ec_explicit_curves option. The result is a hang that consumes a CPU core until the process is interrupted, a Denial of Service. The severity is Low because the attacker must supply the recipient certificate and the application must choose to encrypt to it; ordinary CMS encryption to trusted recipients is unaffected. The fix makes EC key generation fail when the group has no valid nonzero private scalar, instead of retrying indefinitely. FIPS impact: no The FIPS modules in 4.1, 4.0, 3.5 and 3.0 are not affected. The FIPS provider does not support arbitrary explicit EC domain parameters, so an order-1 group is rejected during key import before the vulnerable key generation path is reached.3h CVE-2026-1057347.0 ALT

—

——0Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055905.3 MÉD

—

——0Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.3h CVE-2025-59813—

—

——0Rejected reason: Not used24d CVE-2026-1055897.0 ALT

—

——0Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055886.4 MÉD

—

——0Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055877.0 ALT

—

——0Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055867.0 ALT

—

——0Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055845.5 MÉD

—

——0Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.3h CVE-2026-1055837.0 ALT

—

——0Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055827.0 ALT

—

——0Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.3h CVE-2026-44382—

—

——0Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-1055818.8 ALT

—

——0Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055807.8 ALT

—

——0Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally.3h CVE-2026-1055797.5 ALT

—

——0Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.3h CVE-2026-1055787.5 ALT

—

——0Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.3h CVE-2026-1055757.8 ALT

—

——0Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055747.0 ALT

—

——0Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055697.8 ALT

—

——0Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055686.5 MÉD

—

——0Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.3h CVE-2026-1055677.0 ALT

—

——0Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055667.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055657.0 ALT

—

——0Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055624.7 MÉD

—

——0Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.3h CVE-2026-1055617.5 ALT

—

——0Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.3h CVE-2026-1055607.2 ALT

—

——0Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.3h