PULSE
ESEN
FEED
ransomwhitearmor reclama a maersk · DK · Transportationransomqilin reclama a Acondistec · DE · Manufacturingransomanubis reclama a Kahler Automation · DE · Manufacturingransomsilentransomgroup reclama a Benesch Law · US · Professional Servicesransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomwhitearmor reclama a maersk · DK · Transportationransomqilin reclama a Acondistec · DE · Manufacturingransomanubis reclama a Kahler Automation · DE · Manufacturingransomsilentransomgroup reclama a Benesch Law · US · Professional Servicesransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerce
CVE Watch409.094 no arquivo completo

Vulnerabilidades exploráveis hoje

17,508na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700

Distribuição · última janela

  • Crítica
    5,645
  • Alta
    21,875
  • Média
    21,292
  • Baixa
    2,178
Filtros
Filtros

Janela

Severidade

Filtros

Vulnerabilidades13,401–13,440 · 17,508
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1045859.8 CRÍ
72.7%
——22Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.22dCVE-2026-1042529.8 CRÍ
67.7%
——20Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML escaping. Under the default allow-all ACL policy, a remote unauthenticated attacker can send an operator a crafted request that executes script in the operator's browser after the request is opened. The script runs with the vttablet debug origin and can read same-origin diagnostic endpoints that expose query, transaction, environment, variable, or profiling data available in that deployment. This issue is fixed in versions 23.0.5 and 24.0.2.15dCVE-2026-1038555.5 MÉD
4.1%
——1Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.24dCVE-2026-1038547.8 ALT
8.3%
——3Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.24dCVE-2026-1038535.5 MÉD
5.8%
——2Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.24dCVE-2026-1038525.5 MÉD
2.6%
——1Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.23dCVE-2026-1038517.8 ALT
6.9%
——2Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.23dCVE-2026-1038505.5 MÉD
3.7%
——1Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.24dCVE-2026-1038489.9 CRÍ
72.7%
——22Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.24dCVE-2026-1038478.6 ALT
8.5%
——3Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.24dCVE-2026-1038468.6 ALT
8.4%
——3Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.24dCVE-2026-1038458.6 ALT
8.5%
——3Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.24dCVE-2026-1038447.8 ALT
4.1%
——1Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.24dCVE-2026-1038437.8 ALT
5.8%
——2Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038427.8 ALT
5.0%
——2Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038417.8 ALT
5.0%
——2Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038407.8 ALT
5.0%
——2Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038397.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038387.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038377.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038367.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038357.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038347.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038337.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038327.8 ALT
3.2%
——1Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1038307.8 ALT
6.9%
——2Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.18dCVE-2026-1028558.8 ALT
56.0%
——17Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.18dCVE-2026-1022389.6 CRÍ
57.3%
——17Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.22dCVE-2026-1022358.8 ALT
54.1%
——16Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.22dCVE-2026-1022347.4 ALT
57.5%
——17Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.22dCVE-2026-978446.5 MÉD
60.1%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978436.5 MÉD
60.1%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978426.5 MÉD
56.0%
——17Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978416.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978406.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978396.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978386.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978376.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978366.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22dCVE-2026-978356.5 MÉD
60.6%
——18Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.22d