Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-837077.0 ALT20.5%
——6Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.8dCVE-2026-837066.7 MÉD30.9%
——9Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.8dCVE-2026-837055.5 MÉD59.7%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.8dCVE-2026-837047.8 ALT40.8%
——12Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.8dCVE-2026-837036.5 MÉD51.8%
——16Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.8dCVE-2026-837027.0 ALT20.5%
——6Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.8dCVE-2026-837017.0 ALT20.5%
——6Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.8dCVE-2026-837007.8 ALT29.1%
——9Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.8dCVE-2026-836997.8 ALT35.4%
——11Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-836987.8 ALT29.1%
——9Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-836974.7 MÉD13.1%
——4Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.8dCVE-2026-836967.0 ALT20.5%
——6Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.8dCVE-2026-836955.5 MÉD40.0%
——12Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.8dCVE-2026-836947.0 ALT20.5%
——6Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.8dCVE-2026-836939.8 CRÍ65.9%
——20Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.8dCVE-2026-836927.8 ALT29.1%
——9Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.8dCVE-2026-836917.8 ALT29.1%
——9Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.8dCVE-2026-836907.8 ALT32.0%
——10Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.8dCVE-2026-836897.0 ALT20.5%
——6Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.8dCVE-2026-836888.8 ALT60.7%
——18Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8dCVE-2026-836877.0 ALT20.5%
——6Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.8dCVE-2026-836865.5 MÉD40.0%
——12Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.8dCVE-2026-836856.5 MÉD70.3%
——21Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.8dCVE-2026-836836.5 MÉD70.2%
——21Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.8dCVE-2026-836827.0 ALT20.5%
——6Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.8dCVE-2026-836815.5 MÉD27.3%
——8Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.15dCVE-2026-836807.0 ALT16.7%
——5Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.8dCVE-2026-836797.8 ALT29.1%
——9Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-836787.8 ALT29.1%
——9Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.8dCVE-2026-836777.5 ALT65.8%
——20Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.8dCVE-2026-836767.0 ALT20.5%
——6Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.8dCVE-2026-836757.0 ALT22.8%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.8dCVE-2026-836748.1 ALT53.8%
——16Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.8dCVE-2026-836724.7 MÉD54.0%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.8dCVE-2026-836716.5 MÉD40.0%
——12Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.8dCVE-2026-836707.5 ALT65.0%
——19Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.8dCVE-2026-836697.8 ALT36.8%
——11Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.8dCVE-2026-836685.5 MÉD33.8%
——10Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.8dCVE-2026-836676.5 MÉD69.1%
——21Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.8dCVE-2026-836667.0 ALT12.7%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.8d