Vulnerabilidades exploráveis hoje
17,564na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700
Distribuição · última janela
- Crítica5,645
- Alta21,875
- Média21,293
- Baixa2,178
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-699406.5 MÉD64.3%
——19Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.21dCVE-2026-699357.0 ALT13.9%
——4Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.21dCVE-2026-699347.8 ALT32.0%
——10Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.21dCVE-2026-699317.0 ALT13.9%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.21dCVE-2026-699267.8 ALT35.4%
——11Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.21dCVE-2026-699237.8 ALT48.1%
——14Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.21dCVE-2026-699226.5 MÉD61.3%
——18Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.23dCVE-2026-699195.5 MÉD40.0%
——12Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.21dCVE-2026-699188.8 ALT35.2%
——11Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.21dCVE-2026-699167.8 ALT32.0%
——10Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.21dCVE-2026-699157.0 ALT22.8%
——7Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.21dCVE-2026-699145.5 MÉD40.0%
——12Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.21dCVE-2026-699138.1 ALT52.4%
——16Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.21dCVE-2026-699097.8 ALT27.5%
——8Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.21dCVE-2026-699055.5 MÉD28.0%
——8Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.21dCVE-2026-699026.7 MÉD34.0%
——10Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.21dCVE-2026-698987.8 ALT32.0%
——10Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.21dCVE-2026-698869.8 CRÍ61.4%
——18Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.21dCVE-2026-698847.8 ALT32.0%
——10Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.11dCVE-2026-698839.8 CRÍ61.4%
——18Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.19dCVE-2026-698827.8 ALT48.1%
——14Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.19dCVE-2026-698807.8 ALT35.4%
——11Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.19dCVE-2026-698776.5 MÉD39.8%
——12Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.24dCVE-2026-698677.8 ALT32.0%
——10Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.4dCVE-2026-698567.0 ALT13.9%
——4Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.11dCVE-2026-698507.8 ALT32.0%
——10Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.11dCVE-2026-698407.0 ALT19.3%
——6Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.11dCVE-2026-698308.1 ALT41.6%
——12Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.11dCVE-2026-698028.1 ALT50.2%
——15Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.11dCVE-2026-697987.8 ALT32.0%
——10Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-697957.0 ALT22.8%
——7Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.11dCVE-2026-697897.5 ALT40.3%
——12Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.11dCVE-2026-697837.8 ALT50.2%
——15External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.11dCVE-2026-697667.0 ALT13.9%
——4Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.11dCVE-2026-697658.8 ALT56.7%
——17Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.11dCVE-2026-697637.0 ALT13.9%
——4Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.10dCVE-2026-697437.0 ALT22.8%
——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.10dCVE-2026-697367.0 ALT13.9%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.4dCVE-2026-697337.8 ALT50.2%
——15Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.14dCVE-2026-697215.5 MÉD40.0%
——12Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.4d