Vulnerabilidades exploráveis hoje
17,521na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-853187.8 ALT24.1%
——7Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.9dCVE-2026-84994—44.7%
——13Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37.24dCVE-2026-840207.0 ALT15.9%
——5Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.19dCVE-2026-840197.0 ALT9.8%
——3Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.19dCVE-2026-840187.0 ALT8.5%
——3Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.19dCVE-2026-840177.5 ALT66.4%
——20Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.19dCVE-2026-840167.8 ALT24.1%
——7Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.19dCVE-2026-840159.8 CRÍ59.1%
——18Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.19dCVE-2026-840147.0 ALT12.0%
——4Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.19dCVE-2026-840137.8 ALT24.1%
——7Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.19dCVE-2026-840128.1 ALT52.3%
——16Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.19dCVE-2026-840115.5 MÉD20.8%
——6Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.18dCVE-2026-840094.7 MÉD9.5%
——3Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.18dCVE-2026-840087.5 ALT62.7%
——19Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.15dCVE-2026-840076.5 MÉD62.8%
——19Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.18dCVE-2026-839359.8 CRÍ59.7%
——18Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.18dCVE-2026-839348.8 ALT59.4%
——18Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.18dCVE-2026-839335.5 MÉD41.1%
——12Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.9dCVE-2026-839327.8 ALT26.8%
——8Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.12dCVE-2026-839317.8 ALT22.8%
——7Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.12dCVE-2026-839307.0 ALT19.3%
——6Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.12dCVE-2026-839298.8 ALT48.6%
——15Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.12dCVE-2026-839288.8 ALT47.1%
——14Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.12dCVE-2026-839277.8 ALT32.8%
——10Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.12dCVE-2026-839264.4 MÉD33.2%
——10Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.12dCVE-2026-839254.7 MÉD54.0%
——16Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.12dCVE-2026-839247.0 ALT22.8%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.12dCVE-2026-839238.8 ALT63.6%
——19Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.9dCVE-2026-839227.8 ALT26.9%
——8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.9dCVE-2026-839217.0 ALT19.4%
——6Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-839207.8 ALT25.7%
——8Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-839197.8 ALT24.3%
——7Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.9dCVE-2026-839187.8 ALT25.7%
——8Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-839177.0 ALT20.1%
——6Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.9dCVE-2026-839167.0 ALT22.8%
——7Double free in Windows Error Reporting allows an authorized attacker to execute code locally.9dCVE-2026-839157.0 ALT22.8%
——7Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-839148.1 ALT56.8%
——17Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.9dCVE-2026-839137.8 ALT32.0%
——10Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.9dCVE-2026-839127.8 ALT25.7%
——8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.9dCVE-2026-839117.0 ALT22.8%
——7Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.9d