Vulnerabilidades exploráveis hoje
17,521na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-853718.1 ALT52.3%
——16Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.21dCVE-2026-853707.0 ALT16.8%
——5Use after free in WebDAV allows an authorized attacker to elevate privileges locally.22dCVE-2026-853698.2 ALT29.7%
——9Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.10dCVE-2026-853687.8 ALT24.2%
——7Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.10dCVE-2026-853677.0 ALT16.0%
——5Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.10dCVE-2026-853667.8 ALT24.2%
——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.10dCVE-2026-853657.0 ALT9.9%
——3Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.21dCVE-2026-853647.0 ALT16.0%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.10dCVE-2026-853638.8 ALT58.7%
——18Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.15dCVE-2026-853627.0 ALT16.0%
——5Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.10dCVE-2026-853617.0 ALT16.0%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.10dCVE-2026-853597.8 ALT23.0%
——7Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.10dCVE-2026-853587.8 ALT24.2%
——7Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.10dCVE-2026-853577.0 ALT8.6%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-853567.8 ALT24.2%
——7Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-853557.0 ALT20.7%
——6Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-853547.0 ALT16.0%
——5Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.10dCVE-2026-853537.5 ALT62.5%
——19Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.10dCVE-2026-853527.0 ALT16.0%
——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-853437.8 ALT28.3%
——9Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.10dCVE-2026-853427.0 ALT16.0%
——5Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-853417.8 ALT24.2%
——7Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-853407.8 ALT30.4%
——9Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.23dCVE-2026-853398.8 ALT45.9%
——14Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine10dCVE-2026-853387.8 ALT25.3%
——8Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.21dCVE-2026-853376.5 MÉD58.9%
——18Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.21dCVE-2026-853365.5 MÉD33.0%
——10Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.21dCVE-2026-853347.5 ALT62.5%
——19Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.22dCVE-2026-853336.7 MÉD10.4%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.22dCVE-2026-853327.8 ALT24.1%
——7Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.22dCVE-2026-853316.5 MÉD61.5%
——18Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.22dCVE-2026-853297.0 ALT9.3%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.22dCVE-2026-853287.0 ALT12.6%
——4Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.22dCVE-2026-853277.8 ALT24.1%
——7Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.22dCVE-2026-853247.5 ALT55.1%
——17Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.22dCVE-2026-853236.8 MÉD41.7%
——13Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.22dCVE-2026-853227.5 ALT63.8%
——19Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.22dCVE-2026-853217.5 ALT64.0%
——19Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9dCVE-2026-853205.5 MÉD22.7%
——7Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.9dCVE-2026-853197.5 ALT65.2%
——20Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.9d