Vulnerabilidades exploráveis hoje
17,546na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-702196.5 MÉD61.3%
——18Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.24dCVE-2026-702187.8 ALT29.1%
——9Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.10dCVE-2026-702174.9 MÉD62.1%
——19Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.23dCVE-2026-702165.5 MÉD28.0%
——8Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.10dCVE-2026-702158.8 ALT60.7%
——18Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.22dCVE-2026-702145.5 MÉD47.2%
——14Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.23dCVE-2026-702138.0 ALT32.9%
——10Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.22dCVE-2026-702127.0 ALT19.0%
——6Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.10dCVE-2026-702115.5 MÉD40.0%
——12Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6dCVE-2026-702108.8 ALT60.7%
——18Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.10dCVE-2026-702097.0 ALT22.8%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-702085.5 MÉD38.6%
——12Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.10dCVE-2026-702077.5 ALT55.2%
——17Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.9dCVE-2026-702066.5 MÉD62.1%
——19Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.22dCVE-2026-702057.0 ALT22.8%
——7Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.10dCVE-2026-702027.5 ALT47.5%
——14Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.23dCVE-2026-702015.5 MÉD39.5%
——12Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.10dCVE-2026-701995.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.16dCVE-2026-701987.0 ALT22.8%
——7Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.8dCVE-2026-701978.1 ALT56.4%
——17Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.12dCVE-2026-701965.9 MÉD60.1%
——18Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.24dCVE-2026-701954.7 MÉD17.7%
——5Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.10dCVE-2026-701946.5 MÉD42.1%
——13Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.15dCVE-2026-701907.3 ALT42.3%
——13Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.15dCVE-2026-701889.1 CRÍ61.1%
——18Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.24dCVE-2026-701878.1 ALT56.1%
——17Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.24dCVE-2026-701867.5 ALT61.7%
——19Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.24dCVE-2026-701858.8 ALT23.3%
——7Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.10dCVE-2026-701847.8 ALT36.6%
——11Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.10dCVE-2026-701837.5 ALT45.1%
——14Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.24dCVE-2026-701817.5 ALT69.0%
——21Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.24dCVE-2026-701797.5 ALT50.3%
——15Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.15dCVE-2026-701777.8 ALT29.1%
——9Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.10dCVE-2026-701767.0 ALT26.1%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.16dCVE-2026-701758.1 ALT54.4%
——16Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.24dCVE-2026-701748.8 ALT60.2%
——18Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.15dCVE-2026-701735.5 MÉD38.4%
——12Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.10dCVE-2026-701727.8 ALT32.0%
——10Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.10dCVE-2026-701706.5 MÉD69.2%
——21Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.16dCVE-2026-701697.0 ALT11.8%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.10d