CVE Watch409.094 no arquivo completo

Vulnerabilidades exploráveis hoje

17,564na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769

Novos KEV · 24H0

Exploit Today ≥ 701,700

Distribuição · última janela

Crítica
5,645
Alta
21,875
Média
21,293
Baixa
2,178

Filtros

Janela

Severidade

Filtros

Vulnerabilidades14,641–14,680 · 17,564

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-697187.8 ALT

38.6%

——12Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.14d CVE-2026-697059.8 CRÍ

61.4%

——18Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.4d CVE-2026-696755.5 MÉD

40.0%

——12Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.4d CVE-2026-696737.8 ALT

43.5%

——13Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.14d CVE-2026-696517.5 ALT

69.5%

——21Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.15d CVE-2026-696507.8 ALT

16.9%

——5Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.10d CVE-2026-696445.5 MÉD

60.9%

——18Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.10d CVE-2026-696405.3 MÉD

53.1%

——16Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.12d CVE-2026-696399.8 CRÍ

61.4%

——18Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.12d CVE-2026-696356.6 MÉD

40.6%

——12Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.12d CVE-2026-696349.8 CRÍ

61.4%

——18Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.12d CVE-2026-696337.8 ALT

32.0%

——10Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.12d CVE-2026-695967.0 ALT

22.8%

——7Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.12d CVE-2026-695777.5 ALT

65.0%

——20Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.11d CVE-2026-695218.8 ALT

56.7%

——17Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.14d CVE-2026-695064.7 MÉD

29.2%

——9Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.14d CVE-2026-694717.8 ALT

32.0%

——10Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.14d CVE-2026-694547.5 ALT

65.7%

51.8%

——16Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.14d CVE-2026-693877.0 ALT

22.8%

——7Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.14d CVE-2026-693708.8 ALT

59.2%

——18Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.24d CVE-2026-693638.0 ALT

55.1%

——17Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.14d CVE-2026-693547.8 ALT

32.0%

——10Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.14d CVE-2026-693268.8 ALT

55.7%

——17Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.14d CVE-2026-688367.8 ALT

32.0%

——10Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.14d CVE-2026-668225.9 MÉD

56.2%

——17Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.15d CVE-2026-628795.5 MÉD

28.0%

——8Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.12d CVE-2026-626875.5 MÉD

42.6%

——13Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.12d CVE-2026-619317.8 ALT

32.0%

——10Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.12d CVE-2026-591166.8 MÉD

34.8%

——10Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.12d CVE-2026-582807.5 ALT

69.5%

——21Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.15d CVE-2026-540865.3 MÉD

42.0%

——13SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.21d CVE-2026-497857.8 ALT

32.0%

——10Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.11d CVE-2026-1102563.7 BAI

31.5%

——9Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such as 'a*' to /api/auth/login and measure response timing to enumerate valid LDAP usernames while evading per-username rate limiting.11d CVE-2026-1102558.5 ALT

17.7%

——5Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud metadata endpoints and read the fetched content from the compose response field, exposing credentials and tokens.24d CVE-2026-1102544.3 MÉD

16.9%

——5Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses in transition IPv6 literals within notification, backup, template, registry, git, or secret provider URLs to reach internal services.24d CVE-2026-1102498.6 ALT

7.6%

——2A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5.17d CVE-2026-1102478.4 ALT

8.0%

——2Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data across adjacent heap allocations. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.6.10d CVE-2026-1102404.8 MÉD

26.3%

——8Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal IPv4, to reach internal services or cloud metadata endpoints.24d CVE-2026-1102394.4 MÉD

14.6%

——4Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes when administrators open the record's form.24d