Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-838667.0 ALT20.5%
——6Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.22dCVE-2026-838654.7 MÉD23.2%
——7Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.22dCVE-2026-838645.5 MÉD32.2%
——10Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.22dCVE-2026-838637.8 ALT29.1%
——9Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.8dCVE-2026-838628.8 ALT35.6%
——11Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.14dCVE-2026-838617.8 ALT29.1%
——9Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.22dCVE-2026-838607.5 ALT70.0%
——21Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.22dCVE-2026-838597.8 ALT29.1%
——9Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.22dCVE-2026-838577.8 ALT29.1%
——9Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.22dCVE-2026-838567.5 ALT50.4%
——15Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.24dCVE-2026-838557.5 ALT71.2%
——21Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.24dCVE-2026-838545.5 MÉD25.9%
——8Improper access control in Windows Notification allows an authorized attacker to disclose information locally.22dCVE-2026-838537.0 ALT20.5%
——6Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.22dCVE-2026-838527.0 ALT16.7%
——5Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-838518.8 ALT55.7%
——17Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.9dCVE-2026-838507.8 ALT29.1%
——9Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-838495.5 MÉD38.4%
——12Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.9dCVE-2026-838487.8 ALT35.4%
——11Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-838477.8 ALT27.5%
——8Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.8dCVE-2026-838467.0 ALT19.1%
——6Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.8dCVE-2026-838458.4 ALT25.1%
——8Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.9dCVE-2026-838448.1 ALT54.6%
——16Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.8hCVE-2026-838437.5 ALT70.0%
——21Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.9dCVE-2026-838427.0 ALT22.5%
——7Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.9dCVE-2026-838417.0 ALT11.8%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.10dCVE-2026-838407.8 ALT37.7%
——11Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.10dCVE-2026-838397.0 ALT11.8%
——4Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.10dCVE-2026-838388.0 ALT46.4%
——14Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.10dCVE-2026-838377.8 ALT24.6%
——7Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.10dCVE-2026-838367.8 ALT42.6%
——13Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.10dCVE-2026-838355.5 MÉD59.6%
——18Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.10dCVE-2026-838347.0 ALT21.8%
——7Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.10dCVE-2026-838337.8 ALT29.1%
——9Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.10dCVE-2026-838327.8 ALT29.1%
——9Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.10dCVE-2026-838307.8 ALT35.4%
——11Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-838297.8 ALT29.1%
——9Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.10dCVE-2026-838287.8 ALT29.1%
——9Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.10dCVE-2026-838277.0 ALT20.5%
——6Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-838267.8 ALT29.1%
——9Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.10dCVE-2026-837985.5 MÉD15.1%
——5Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.10d