Vulnerabilidades exploráveis hoje
17,521na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-858257.0 ALT8.6%
——3Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.21dCVE-2026-858247.0 ALT8.6%
——3Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.21dCVE-2026-858237.0 ALT16.0%
——5Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.21dCVE-2026-858227.8 ALT24.2%
——7Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.21dCVE-2026-858216.5 MÉD61.5%
——18Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.21dCVE-2026-858207.8 ALT24.2%
——7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.21dCVE-2026-858189.0 CRÍ35.9%
——11Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.21dCVE-2026-858178.8 ALT54.2%
——16Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.21dCVE-2026-858165.7 MÉD44.4%
——13Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.21dCVE-2026-858155.5 MÉD33.1%
——10Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.21dCVE-2026-858149.8 CRÍ60.7%
——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.21dCVE-2026-858125.5 MÉD42.4%
——13Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.21dCVE-2026-858117.5 ALT29.0%
——9Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.21dCVE-2026-858107.0 ALT16.0%
——5Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.21dCVE-2026-858099.8 CRÍ60.7%
——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine21dCVE-2026-858087.5 ALT66.4%
——20Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.21dCVE-2026-858077.8 ALT24.2%
——7Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.21dCVE-2026-858069.8 CRÍ60.1%
——18Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.21dCVE-2026-858056.5 MÉD48.6%
——15Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.21dCVE-2026-858047.8 ALT27.3%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.22dCVE-2026-858037.0 ALT16.0%
——5Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.22dCVE-2026-858027.0 ALT18.1%
——5Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.22dCVE-2026-858007.8 ALT24.2%
——7Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.22dCVE-2026-857998.1 ALT51.7%
——16Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.22dCVE-2026-857987.2 ALT59.0%
——18Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.22dCVE-2026-857976.5 MÉD60.2%
——18Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.22dCVE-2026-857967.8 ALT24.2%
——7Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.22dCVE-2026-857957.8 ALT24.2%
——7Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.22dCVE-2026-857945.5 MÉD33.1%
——10Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.22dCVE-2026-857935.5 MÉD40.0%
——12Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.22dCVE-2026-857929.8 CRÍ59.6%
——18Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine22dCVE-2026-857917.0 ALT20.7%
——6Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-857905.9 MÉD56.9%
——17Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.15dCVE-2026-857476.8 MÉD12.3%
——4Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.20dCVE-2026-853777.8 ALT24.2%
——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.21dCVE-2026-853767.8 ALT20.4%
——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.21dCVE-2026-853757.8 ALT24.2%
——7Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.21dCVE-2026-853745.5 MÉD33.1%
——10Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.21dCVE-2026-853737.8 ALT24.2%
——7Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.21dCVE-2026-853727.0 ALT16.0%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.21d