Vulnerabilidades exploráveis hoje
17,521na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,292
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-839109.8 CRÍ64.7%
——19Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.9dCVE-2026-839094.7 MÉD36.4%
——11Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.9dCVE-2026-839087.0 ALT22.8%
——7Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.9dCVE-2026-839075.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.9dCVE-2026-839066.5 MÉD62.7%
——19Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.9dCVE-2026-839054.7 MÉD54.0%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.9dCVE-2026-839045.5 MÉD36.7%
——11Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-839037.8 ALT32.0%
——10Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.9dCVE-2026-839027.8 ALT33.9%
——10Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.9dCVE-2026-839017.0 ALT22.8%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.9dCVE-2026-839007.0 ALT22.8%
——7Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.24dCVE-2026-838997.0 ALT14.5%
——4Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.22dCVE-2026-838985.5 MÉD36.7%
——11Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-838974.7 MÉD52.8%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.22dCVE-2026-838967.8 ALT33.9%
——10Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.22dCVE-2026-838956.8 MÉD42.9%
——13Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.22dCVE-2026-838935.5 MÉD45.8%
——14Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.22dCVE-2026-838925.5 MÉD38.3%
——11Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-838918.8 ALT59.9%
——18Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.22dCVE-2026-838898.8 ALT64.6%
——19Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.22dCVE-2026-838886.5 MÉD62.3%
——19Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.22dCVE-2026-838875.5 MÉD36.7%
——11Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-838867.0 ALT26.1%
——8Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.24dCVE-2026-838855.6 MÉD11.4%
——3Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.24dCVE-2026-838845.5 MÉD38.3%
——11Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-838837.8 ALT32.0%
——10Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.22dCVE-2026-838827.8 ALT32.0%
——10Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.22dCVE-2026-838817.8 ALT32.0%
——10Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.22dCVE-2026-838797.0 ALT13.9%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.22dCVE-2026-838777.8 ALT32.0%
——10Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.9dCVE-2026-838767.8 ALT32.0%
——10Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.17dCVE-2026-838755.5 MÉD30.0%
——9Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.9dCVE-2026-838748.8 ALT58.4%
——18Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.17dCVE-2026-838737.8 ALT33.5%
——10Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.17dCVE-2026-838727.8 ALT29.1%
——9Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.17dCVE-2026-838717.0 ALT12.7%
——4Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.17dCVE-2026-838705.5 MÉD38.4%
——12Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.17dCVE-2026-838699.8 CRÍ57.4%
——17Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.22dCVE-2026-838687.0 ALT9.8%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-838677.8 ALT35.4%
——11Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.17d