CVE Watch412.645 no arquivo completo

Vulnerabilidades exploráveis hoje

412,645na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,779

Novos KEV · 24H6

Exploit Today ≥ 701,703

Distribuição · última janela

Crítica
5,634
Alta
22,161
Média
20,546
Baixa
2,120

Filtros

Janela

Severidade

Filtros

Vulnerabilidades412,561–412,600 · 412,645

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-56440—

—

——0Improper input validation for some BigDL before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-56759—

—

——0Improper input validation in the MigTD PCI BAR handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-57882—

—

——0Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4h CVE-2026-57890—

—

——0Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. Network adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-57891—

—

——0Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.4h CVE-2026-57892—

—

——0Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.4h CVE-2026-57893—

—

——0Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-59771—

—

——0Improper validation of array index in the MigTD's virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-60020—

—

——0Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2023-3911—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.24d CVE-2017-3755—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.24d CVE-2024-43903—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.25d CVE-2026-60059—

—

——0Use of uninitialized resource in the MigTD memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. Network adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-60071—

—

——0Improper validation of specified quantity in input in the MigTD vsock packet handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2023-46719—

—

——0Rejected reason: Not used24d CVE-2026-60133—

—

——0Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2026-60138—

—

——0Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.4h CVE-2023-47535—

—

——0Rejected reason: Not used24d CVE-2016-2596—

—

——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none24d CVE-2016-8078—

—

——0Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.3h CVE-2026-1055267.0 ALT

—

——0Double free in Winsock allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055257.0 ALT

—

——0Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055247.8 ALT

—

——0Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055227.0 ALT

—

——0Use after free in Winlogon allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055207.2 ALT

—

——0Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.3h CVE-2026-1055188.8 ALT

—

——0Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.3h CVE-2026-1055157.5 ALT

—

——0Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.3h CVE-2026-1055137.0 ALT

—

——0An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.3h CVE-2026-1055127.5 ALT

—

——0Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.3h CVE-2026-1055117.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055107.0 ALT

—

——0Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055097.0 ALT

—

——0Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055077.8 ALT

—

——0An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.3h CVE-2026-1055057.8 ALT

—

——0Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055047.0 ALT

—

——0Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.3h CVE-2026-1055017.8 ALT

—

——0Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.3h CVE-2026-1054998.8 ALT

—

——0Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.3h CVE-2026-1054988.8 ALT

—

——0Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.3h