Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-702668.8 ALT65.1%
——20Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.23dCVE-2026-702645.5 MÉD42.2%
——13Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.24dCVE-2026-702636.5 MÉD63.1%
——19Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.22dCVE-2026-702628.8 ALT60.7%
——18Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.10dCVE-2026-702615.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.9dCVE-2026-702605.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.9dCVE-2026-702596.5 MÉD60.3%
——18Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.23dCVE-2026-702588.8 ALT60.7%
——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.9dCVE-2026-702578.8 ALT60.2%
——18Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.23dCVE-2026-702568.8 ALT60.2%
——18Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.23dCVE-2026-702557.8 ALT33.8%
——10Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.9dCVE-2026-702548.8 ALT59.6%
——18Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.22dCVE-2026-702537.0 ALT26.1%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-702527.0 ALT20.5%
——6Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.9dCVE-2026-702517.5 ALT49.7%
——15Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.23dCVE-2026-702508.8 ALT40.6%
——12Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.10dCVE-2026-702497.0 ALT26.1%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-702486.5 MÉD37.9%
——11Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.10dCVE-2026-702477.8 ALT27.5%
——8Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.10dCVE-2026-702468.8 ALT58.8%
——18Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.23dCVE-2026-702457.8 ALT36.8%
——11Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.10dCVE-2026-702446.5 MÉD64.3%
——19Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.22dCVE-2026-702437.0 ALT22.8%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.16dCVE-2026-702429.8 CRÍ75.5%
——23Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.23dCVE-2026-702417.0 ALT22.5%
——7Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.10dCVE-2026-702387.8 ALT29.1%
——9Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.10dCVE-2026-702377.0 ALT24.9%
——7Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.10dCVE-2026-702367.0 ALT23.6%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-702355.5 MÉD25.1%
——8Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.10dCVE-2026-702345.5 MÉD36.7%
——11Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.9dCVE-2026-702337.8 ALT41.9%
——13Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-702325.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.16dCVE-2026-702307.0 ALT22.8%
——7Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-702298.1 ALT64.2%
——19Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.10dCVE-2026-702287.8 ALT30.4%
——9Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.10dCVE-2026-702275.5 MÉD40.0%
——12Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.10dCVE-2026-702257.8 ALT32.0%
——10Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.10dCVE-2026-702237.0 ALT23.6%
——7Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.10dCVE-2026-702227.8 ALT33.5%
——10Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.10dCVE-2026-702207.8 ALT38.5%
——12Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.22d