Vulnerabilidades exploráveis hoje
412,645na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H6
Exploit Today ≥ 701,703
Distribuição · última janela
- Crítica5,634
- Alta22,161
- Média20,546
- Baixa2,120
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1055596.5 MÉD—
——0No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.3hCVE-2026-1055587.5 ALT—
——0Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network.3hCVE-2026-44606——
——0Out-of-bounds write for some Intel(R) Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-1055575.9 MÉD—
——0Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.3hCVE-2026-1055547.0 ALT—
——0Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055537.0 ALT—
——0Stack-based buffer overflow in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055525.5 MÉD—
——0An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.
To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.3hCVE-2026-44624——
——0Incorrect comparison in the Ext2 parser for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-65222——
——0Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-life. This CVE ID is unused by the CNA.15dCVE-2026-65226——
——0Rejected reason: This CVE ID has been rejected by runZero as unused.15dCVE-2018-4659——
——0Rejected reason: This candidate is unused by its CNA.24dCVE-2019-8863——
——0Rejected reason: This candidate is unused by its CNA.24dCVE-2026-1055517.5 ALT—
——0Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a network.3hCVE-2026-1055494.3 MÉD—
——0Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.3hCVE-2026-1055477.0 ALT—
——0Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055467.0 ALT—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055457.0 ALT—
——0An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.
A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.3hCVE-2026-1055447.5 ALT—
——0Improper access control in .NET allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055437.8 ALT—
——0Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055428.8 ALT—
——0Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.3hCVE-2026-1055417.8 ALT—
——0Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055407.0 ALT—
——0Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055375.5 MÉD—
——0Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.3hCVE-2026-1055348.8 ALT—
——0Heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute code over a network.3hCVE-2026-1055337.0 ALT—
——0Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055327.8 ALT—
——0Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055315.5 MÉD—
——0External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.3hCVE-2026-1055305.5 MÉD—
——0Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.3hCVE-2026-1055297.0 ALT—
——0Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally.3hCVE-2026-1055287.8 ALT—
——0Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.3hCVE-2026-44625——
——0Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-44685——
——0Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4hCVE-2026-49036——
——0Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-50175——
——0Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-50249——
——0Out-of-bounds read in the GenerationSetup for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-52899——
——0Deserialization of untrusted data for some BigDL software before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-55709——
——0Loop with unreachable exit condition ('infinite loop') in the MigTD's GetQuote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-55716——
——0Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4hCVE-2026-56432——
——0Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.4hCVE-2026-56435——
——0Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4h