Vulnerabilidades exploráveis hoje
17,521na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-859417.0 ALT13.6%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.9dCVE-2026-859395.3 MÉD31.0%
——9Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.9dCVE-2026-859385.5 MÉD27.0%
——8Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.9dCVE-2026-859368.8 ALT45.9%
——14Double free in Windows Shell allows an unauthorized attacker to execute code over a network.9dCVE-2026-859355.5 MÉD33.0%
——10Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.9dCVE-2026-859347.0 ALT15.9%
——5Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-859337.8 ALT15.1%
——5Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.9dCVE-2026-859326.5 MÉD67.9%
——20Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.23dCVE-2026-859318.8 ALT58.4%
——18Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.10dCVE-2026-859307.0 ALT9.8%
——3Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.10dCVE-2026-859289.8 CRÍ50.6%
——15Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.10dCVE-2026-859277.8 ALT24.1%
——7Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.10dCVE-2026-859268.1 ALT51.7%
——16Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.22dCVE-2026-859258.2 ALT44.7%
——13Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.22dCVE-2026-859227.4 ALT49.3%
——15Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.22dCVE-2026-859207.0 ALT5.0%
——1Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.22dCVE-2026-859187.0 ALT15.9%
——5Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.22dCVE-2026-859166.2 MÉD37.0%
——11Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.22dCVE-2026-859157.8 ALT24.1%
——7Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.22dCVE-2026-859147.0 ALT9.8%
——3Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.22dCVE-2026-859127.0 ALT8.2%
——2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-859117.8 ALT29.1%
——9Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.11dCVE-2026-859105.5 MÉD38.4%
——12Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.11dCVE-2026-859095.5 MÉD38.4%
——12Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.11dCVE-2026-859087.8 ALT36.9%
——11Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.6dCVE-2026-859067.8 ALT27.6%
——8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.10dCVE-2026-859058.8 ALT29.1%
——9Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.10dCVE-2026-859047.0 ALT4.5%
——1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.22dCVE-2026-859038.8 ALT53.5%
——16Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.22dCVE-2026-859027.8 ALT32.4%
——10Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.22dCVE-2026-859017.8 ALT35.4%
——11Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.22dCVE-2026-859008.8 ALT74.7%
——22Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.23dCVE-2026-858917.5 ALT60.5%
——18Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.24dCVE-2026-858847.8 ALT38.2%
——11Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-858818.0 ALT52.5%
——16Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.8dCVE-2026-858797.0 ALT11.8%
——4Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.9dCVE-2026-858747.8 ALT29.1%
——9Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.9dCVE-2026-858736.5 MÉD61.6%
——18Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.22dCVE-2026-858727.8 ALT20.5%
——6Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-858717.8 ALT24.1%
——7Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.9d