Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-836657.5 ALT71.2%
——21Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.8dCVE-2026-836645.5 MÉD33.8%
——10Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.8dCVE-2026-836597.8 ALT26.7%
——8Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-836585.5 MÉD27.7%
——8Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.8dCVE-2026-836575.5 MÉD19.9%
——6Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.8dCVE-2026-836564.7 MÉD17.9%
——5Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.8dCVE-2026-836557.5 ALT71.2%
——21Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.8dCVE-2026-836547.8 ALT24.6%
——7Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.8dCVE-2026-836527.8 ALT29.1%
——9Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.9dCVE-2026-836516.5 MÉD64.3%
——19Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.6dCVE-2026-836507.8 ALT29.1%
——9Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.8dCVE-2026-836496.5 MÉD69.2%
——21Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.8dCVE-2026-836486.5 MÉD69.1%
——21Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.8dCVE-2026-836477.5 ALT69.9%
——21Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.8dCVE-2026-836464.8 MÉD31.5%
——9Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.8dCVE-2026-836457.5 ALT68.8%
——21Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.8dCVE-2026-836447.0 ALT20.5%
——6Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-836438.8 ALT60.7%
——18Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.8dCVE-2026-836428.8 ALT60.7%
——18Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.22dCVE-2026-836417.8 ALT29.1%
——9Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.8dCVE-2026-836407.8 ALT29.1%
——9Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.9dCVE-2026-836397.8 ALT29.1%
——9Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-836387.8 ALT29.1%
——9Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-836377.8 ALT32.0%
——10Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.9dCVE-2026-836366.5 MÉD37.9%
——11Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.9dCVE-2026-836357.5 ALT71.2%
——21Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.22dCVE-2026-836347.8 ALT29.1%
——9Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.9dCVE-2026-835887.8 ALT29.1%
——9Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-835877.8 ALT29.1%
——9Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.8dCVE-2026-835867.8 ALT24.6%
——7Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-835857.8 ALT29.1%
——9Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.9dCVE-2026-835847.0 ALT20.5%
——6Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.9dCVE-2026-835837.8 ALT27.4%
——8Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.8dCVE-2026-835824.7 MÉD29.2%
——9Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.9dCVE-2026-835807.0 ALT24.9%
——7Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.8dCVE-2026-835797.8 ALT32.0%
——10Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.9dCVE-2026-835789.8 CRÍ64.8%
——19Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.8dCVE-2026-835757.0 ALT22.8%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-835747.0 ALT22.8%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-835736.8 MÉD42.9%
——13Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.9d