Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-835715.5 MÉD40.0%
——12Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.8dCVE-2026-835707.8 ALT32.0%
——10Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.9dCVE-2026-835697.8 ALT30.4%
——9Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.8dCVE-2026-835687.8 ALT27.4%
——8Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.9dCVE-2026-835677.8 ALT32.0%
——10Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.9dCVE-2026-835667.0 ALT22.8%
——7Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.9dCVE-2026-835655.5 MÉD40.0%
——12Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.9dCVE-2026-835647.0 ALT22.8%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.8dCVE-2026-835238.8 ALT60.7%
——18Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.8dCVE-2026-835228.1 ALT56.8%
——17Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.8dCVE-2026-835216.5 MÉD66.5%
——20Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.8dCVE-2026-835208.8 ALT73.2%
——22Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.15dCVE-2026-835199.8 CRÍ64.7%
——19Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.8dCVE-2026-835187.8 ALT32.0%
——10Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.8dCVE-2026-835179.8 CRÍ64.7%
——19Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.8dCVE-2026-835167.5 ALT71.2%
——21Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.8dCVE-2026-835156.5 MÉD64.3%
——19Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.8dCVE-2026-835147.8 ALT32.0%
——10Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.8dCVE-2026-835137.8 ALT32.0%
——10Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.8dCVE-2026-835117.4 ALT51.4%
——15Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.9dCVE-2026-835107.0 ALT14.5%
——4Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.9dCVE-2026-835097.0 ALT36.6%
——11Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.9dCVE-2026-835087.8 ALT32.0%
——10Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.9dCVE-2026-835075.5 MÉD42.6%
——13Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.9dCVE-2026-835067.8 ALT34.9%
——10Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.9dCVE-2026-835057.0 ALT25.4%
——8Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.9dCVE-2026-835044.7 MÉD19.4%
——6Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.9dCVE-2026-835006.1 MÉD39.3%
——12Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.9dCVE-2026-834997.8 ALT27.4%
——8Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-819717.0 ALT14.5%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.9dCVE-2026-819697.8 ALT27.4%
——8Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-819645.5 MÉD28.0%
——8Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.9dCVE-2026-784597.8 ALT30.4%
——9Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.9dCVE-2026-779108.8 ALT58.9%
——18Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.24dCVE-2026-779028.8 ALT59.6%
——18Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-774968.8 ALT60.7%
——18Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.9dCVE-2026-75120—35.7%
——11The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment22dCVE-2026-730277.8 ALT44.3%
——13External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.9dCVE-2026-729697.0 ALT22.8%
——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9dCVE-2026-729687.0 ALT22.8%
——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.9d