CVE Watch409.385 no arquivo completo

Vulnerabilidades exploráveis hoje

17,785na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769

Novos KEV · 24H0

Exploit Today ≥ 701,700

Distribuição · última janela

Crítica
5,688
Alta
21,922
Média
21,240
Baixa
2,173

Filtros

Janela

Severidade

Filtros

Vulnerabilidades12,121–12,160 · 17,785

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1084518.8 ALT

49.8%

——15Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084508.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084498.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084487.5 ALT

41.4%

——12Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084478.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084468.8 ALT

49.8%

——15Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084458.8 ALT

49.8%

——15Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084448.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084438.8 ALT

49.8%

——15Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19d CVE-2026-1084428.8 ALT

49.8%

——15Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084418.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084408.8 ALT

49.8%

——15Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084398.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084386.5 MÉD

54.8%

——16Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.18d CVE-2026-1084378.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084366.5 MÉD

54.8%

——16Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.18d CVE-2026-1084356.5 MÉD

54.8%

——16Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.18d CVE-2026-1084346.5 MÉD

54.8%

——16Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.18d CVE-2026-1084337.8 ALT

36.4%

——11Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.18d CVE-2026-1084328.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084318.8 ALT

49.8%

——15Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084308.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084298.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084288.8 ALT

49.8%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084278.8 ALT

50.6%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1084268.8 ALT

49.1%

——15Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.18d CVE-2026-1050408.8 ALT

28.5%

——9The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.22d CVE-2026-1050399.6 CRÍ

22.0%

——7EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.22d CVE-2026-1050389.8 CRÍ

51.2%

——15The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.22d CVE-2026-1050379.9 CRÍ

34.4%

——10EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.22d CVE-2026-1050367.5 ALT

14.6%

——4EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.22d CVE-2026-1050357.8 ALT

9.9%

——3The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from the updater can decrypt and forge firmware packages for any device that trusts it.22d CVE-2026-1050348.2 ALT

46.7%

——14The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.22d CVE-2026-1050338.8 ALT

29.2%

——9The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.22d CVE-2026-1050329.1 CRÍ

59.9%

——18The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper with AI skill files used by Eilik and EilikO robots.22d CVE-2026-1027649.8 CRÍ

99.6%

KEV—80BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability21d CVE-2026-1067088.8 ALT

4.0%

——1XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The endpoints /user/insert, /user/update, and /user/delete lack CSRF protection and do not restrict HTTP method.19d CVE-2026-1067008.8 ALT

23.2%

——7ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.22d CVE-2026-1041985.3 MÉD

32.9%

——10ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller assigns that value to the global $user variable; because web/index.php tests isset($user), boolean false is treated as a present user and the normal login redirect is skipped. This can dispatch views that rely on the outer authentication gate, including the zones view, which accepts an attacker-selected monitor ID and discloses monitor and zone metadata without an independent permission check. Permission helpers receive the false user value and deny privileged operations, so unauthorized state changes have not been established. This vulnerability is fixed in version 1.36.63, where conversion to ZM\User objects causes invalid token state to fail before view dispatch. Later defense-in-depth changes explicitly leave $user unset after failed token validation and reject non-ZM\User values at the web authentication gate.23d CVE-2026-103910—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-101335. Reason: This candidate is a reservation duplicate of CVE-2026-101335. Notes: All CVE users should reference CVE-2026-101335 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.21d