Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-837978.8 ALT58.4%
——18Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.10dCVE-2026-837967.8 ALT29.1%
——9Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.10dCVE-2026-837957.5 ALT70.0%
——21Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.10dCVE-2026-837945.5 MÉD38.4%
——12Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.10dCVE-2026-837937.0 ALT24.9%
——7Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-837927.8 ALT24.6%
——7Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-837917.8 ALT24.6%
——7Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.9dCVE-2026-837907.0 ALT20.5%
——6Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.9dCVE-2026-837898.8 ALT58.4%
——18Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.9dCVE-2026-837884.6 MÉD43.7%
——13Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.9dCVE-2026-837875.5 MÉD25.1%
——8Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.9dCVE-2026-837864.7 MÉD52.8%
——16Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.9dCVE-2026-837857.0 ALT24.9%
——7Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-837848.8 ALT65.3%
——20Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.9dCVE-2026-837837.8 ALT29.1%
——9Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.5dCVE-2026-837829.8 CRÍ62.7%
——19Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.5dCVE-2026-837817.8 ALT29.1%
——9Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.5dCVE-2026-837809.8 CRÍ64.7%
——19Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.5dCVE-2026-837797.8 ALT29.1%
——9Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.5dCVE-2026-837788.8 ALT60.2%
——18Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.22dCVE-2026-837778.8 ALT49.3%
——15Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.5dCVE-2026-837766.8 MÉD43.6%
——13Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.22dCVE-2026-837757.0 ALT13.9%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.5dCVE-2026-837744.7 MÉD54.0%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.17dCVE-2026-837735.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.5dCVE-2026-837718.8 ALT49.3%
——15Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.5dCVE-2026-837709.8 CRÍ65.9%
——20Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.5dCVE-2026-837697.8 ALT35.2%
——11Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.9dCVE-2026-837687.8 ALT33.9%
——10Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.16dCVE-2026-837677.8 ALT23.2%
——7Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.9dCVE-2026-837664.2 MÉD34.3%
——10Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.9dCVE-2026-837655.5 MÉD33.8%
——10Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.9dCVE-2026-837645.5 MÉD27.7%
——8Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.9dCVE-2026-837637.8 ALT33.9%
——10Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.9dCVE-2026-837627.8 ALT29.1%
——9Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.8dCVE-2026-837617.8 ALT36.8%
——11Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-837605.5 MÉD32.1%
——10Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.8dCVE-2026-837598.8 ALT60.6%
——18Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.8dCVE-2026-837587.8 ALT29.1%
——9Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.8dCVE-2026-837577.8 ALT29.1%
——9Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.8d