Vulnerabilidades exploráveis hoje
17,564na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-700647.8 ALT32.0%
——10Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.10dCVE-2026-700634.7 MÉD29.2%
——9Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.10dCVE-2026-700628.1 ALT55.8%
——17Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.10dCVE-2026-700607.8 ALT36.8%
——11Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.10dCVE-2026-700597.8 ALT32.0%
——10Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.10dCVE-2026-700587.5 ALT71.2%
——21Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.10dCVE-2026-700575.5 MÉD25.1%
——8Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.10dCVE-2026-700567.0 ALT22.8%
——7Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-700555.5 MÉD60.9%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.10dCVE-2026-700547.8 ALT39.8%
——12Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.10dCVE-2026-700527.8 ALT30.5%
——9Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.10dCVE-2026-700517.8 ALT29.1%
——9Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.10dCVE-2026-700498.0 ALT85.7%
——26Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.24dCVE-2026-700487.8 ALT32.0%
——10Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.10dCVE-2026-700457.0 ALT22.8%
——7Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.21dCVE-2026-700445.5 MÉD48.3%
——15Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.21dCVE-2026-700415.5 MÉD40.0%
——12Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.21dCVE-2026-700388.1 ALT55.0%
——17Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.21dCVE-2026-700358.8 ALT73.2%
——22Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.15dCVE-2026-700337.5 ALT70.0%
——21Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.21dCVE-2026-700317.5 ALT70.0%
——21Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.21dCVE-2026-700277.8 ALT32.0%
——10Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.21dCVE-2026-700267.0 ALT22.8%
——7Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.21dCVE-2026-700255.3 MÉD65.2%
——20Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.21dCVE-2026-700249.8 CRÍ61.6%
——18Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.21dCVE-2026-700237.8 ALT32.0%
——10Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.21dCVE-2026-700217.0 ALT22.8%
——7Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.21dCVE-2026-700175.5 MÉD40.0%
——12Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.21dCVE-2026-700157.8 ALT32.0%
——10Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.21dCVE-2026-700147.5 ALT55.2%
——17Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.21dCVE-2026-700138.1 ALT51.6%
——15Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.19dCVE-2026-700127.5 ALT50.4%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.18dCVE-2026-700115.5 MÉD40.0%
——12Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.11dCVE-2026-700107.8 ALT32.0%
——10Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.11dCVE-2026-700087.8 ALT32.0%
——10Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-700078.8 ALT56.8%
——17Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.15dCVE-2026-700067.5 ALT50.4%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.10dCVE-2026-700055.9 MÉD50.3%
——15Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.10dCVE-2026-700047.5 ALT50.4%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.19dCVE-2026-699995.5 MÉD40.0%
——12Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.19d