Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-76284
Crítica · 9.8
CWE-707 07/10/2026
Neutralização imprópria em vulnerabilidades do Splunk Enterprise (CWE-707)
Neutralização imprópria. A Splunk corrigiu múltiplas vulnerabilidades identificadas internamente nas versões 10.4.3, 10.2.7, 10.0.10 e 9.4.15 do Splunk Enterprise. As vulnerabilidades são agrupadas por Common Weakness Enumeration (CWE), com um identificador Common Vulnerabilities and Exposures (CVE) atribuído a cada grupo. Consulte Details para mais informações.
CVE-2026-76499
Crítica · 9.8
CWE-707 07/10/2026
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
CVE-2026-76453
Alta · 8.8
CWE-707 07/10/2026
Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.
CVE-2025-66545
Média · 4.3
CWE-707 05/12/2025
Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin
Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2.
CVE-2025-27712
Média · 5.7
CWE-707 11/11/2025
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4…
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2025-26633
Alta · 7.0
KEV Urgente · 80 Exploit público Ransomware CWE-707 11/03/2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2024-43572
Alta · 7.8
KEV Alta · 56 CWE-707 08/10/2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability