Vulnerabilidades exploráveis hoje
17,508na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-977445.5 MÉD40.3%
——12Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.22dCVE-2026-977436.5 MÉD62.1%
——19Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.22dCVE-2026-977428.8 ALT60.7%
——18Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-977418.8 ALT60.7%
——18Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-977406.5 MÉD58.6%
——18Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.22dCVE-2026-977398.8 ALT57.4%
——17Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-977388.8 ALT58.6%
——18Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970178.8 ALT55.4%
——17Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970169.8 CRÍ67.6%
——20Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.23dCVE-2026-970145.5 MÉD42.9%
——13Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.24dCVE-2026-970128.8 ALT54.7%
——16Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.23dCVE-2026-970118.8 ALT58.1%
——17Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970108.8 ALT58.1%
——17Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970097.8 ALT25.4%
——8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.24dCVE-2026-970088.8 ALT58.6%
——18Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970078.8 ALT58.6%
——18Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970055.5 MÉD28.4%
——9Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.22dCVE-2026-970048.8 ALT58.6%
——18Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970038.8 ALT55.4%
——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-970017.8 ALT31.9%
——10Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.22dCVE-2026-969977.8 ALT23.7%
——7Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.22dCVE-2026-969967.8 ALT25.4%
——8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.23dCVE-2026-969957.8 ALT23.7%
——7Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.22dCVE-2026-969607.5 ALT68.4%
——21Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.15dCVE-2026-969597.5 ALT62.0%
——19Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.15dCVE-2026-969587.5 ALT68.4%
——21Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.15dCVE-2026-969578.8 ALT45.3%
——14Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.15dCVE-2026-969537.8 ALT23.2%
——7Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.22dCVE-2026-969528.8 ALT59.9%
——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.22dCVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability9dCVE-2026-969507.8 ALT29.1%
——9Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-969497.0 ALT11.8%
——4Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-969485.5 MÉD44.4%
——13Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.22dCVE-2026-969477.8 ALT29.1%
——9Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-969467.8 ALT29.1%
——9Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-969457.5 ALT64.5%
——19Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.22dCVE-2026-969445.5 MÉD44.4%
——13Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.22dCVE-2026-969438.8 ALT49.0%
——15Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.22dCVE-2026-969397.0 ALT13.6%
——4Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.22dCVE-2026-969386.7 MÉD30.9%
——9Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.22d