Vulnerabilidades exploráveis hoje
17,508na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-962529.1 CRÍ46.8%
——14Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.18dCVE-2026-962518.8 ALT53.0%
——16Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.15dCVE-2026-962507.0 ALT20.5%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.22dCVE-2026-962497.8 ALT29.1%
——9Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.22dCVE-2026-962487.5 ALT66.4%
——20Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.22dCVE-2026-962475.5 MÉD33.0%
——10Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.22dCVE-2026-962467.5 ALT62.5%
——19Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.18dCVE-2026-962457.5 ALT62.5%
——19Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.22dCVE-2026-962447.8 ALT24.1%
——7Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.22dCVE-2026-962437.8 ALT26.7%
——8Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.22dCVE-2026-962386.5 MÉD22.4%
——7Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.15dCVE-2026-962377.5 ALT50.8%
——15Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.15dCVE-2026-962367.5 ALT65.4%
——20Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.24dCVE-2026-962358.8 ALT58.7%
——18Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.15dCVE-2026-962345.3 MÉD26.1%
——8Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.15dCVE-2026-962337.5 ALT62.7%
——19Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.15dCVE-2026-962327.5 ALT59.7%
——18Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.15dCVE-2026-962317.8 ALT35.5%
——11Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.15dCVE-2026-962308.8 ALT61.3%
——18Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.15dCVE-2026-962296.5 MÉD61.4%
——18Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.15dCVE-2026-962257.8 ALT35.5%
——11Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.15dCVE-2026-962248.8 ALT55.4%
——17Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.15dCVE-2026-962237.8 ALT24.1%
——7Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.22dCVE-2026-962227.4 ALT48.2%
——14Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.15dCVE-2026-962207.8 ALT22.9%
——7Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.22dCVE-2026-962199.8 CRÍ59.6%
——18Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.3dCVE-2026-962185.5 MÉD46.3%
——14Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.22dCVE-2026-962177.8 ALT24.1%
——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.22dCVE-2026-962167.0 ALT15.9%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.22dCVE-2026-962157.0 ALT8.5%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.22dCVE-2026-962097.0 ALT20.5%
——6Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.22dCVE-2026-962066.5 MÉD38.4%
——12Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.8dCVE-2026-962046.5 MÉD56.0%
——17Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.24dCVE-2026-962028.8 ALT60.8%
——18Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.9dCVE-2026-961887.3 ALT31.7%
——10External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.24dCVE-2026-961867.8 ALT84.1%
——25Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.22dCVE-2026-961835.5 MÉD32.2%
——10Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.22dCVE-2026-961187.8 ALT29.1%
——9Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.22dCVE-2026-961139.8 CRÍ58.9%
——18Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.22dCVE-2026-961087.8 ALT22.7%
——7Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.8d