Início / CVEs
Vulnerabilidades exploradas (CISA KEV)
CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.
CVE-2024-38189
Alta · 8.8
KEV Alta · 55 CWE-20 13/08/2024
Microsoft Project Remote Code Execution Vulnerability
Microsoft Project Remote Code Execution Vulnerability
CVE-2024-38178
Alta · 7.5
KEV Alta · 56 CWE-843 13/08/2024
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
CVE-2024-38106
Alta · 7.0
KEV Alta · 55 CWE-591 13/08/2024
Microsoft Windows Kernel Privilege Escalation Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38107
Alta · 7.8
KEV Alta · 52 CWE-416 13/08/2024
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38112
Alta · 7.5
KEV Alta · 62 Exploit público CWE-451 09/07/2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38094
Alta · 7.2
KEV Alta · 66 Ransomware CWE-502 09/07/2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2024-38080
Alta · 7.8
KEV Alta · 61 Exploit público CWE-190 09/07/2024
Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-35250
Alta · 7.8
KEV Urgente · 74 Exploit público CWE-822 11/06/2024
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30088
Alta · 7.0
KEV Urgente · 82 Exploit público Ransomware CWE-367 11/06/2024
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30051
Alta · 7.8
KEV Urgente · 71 Exploit público Ransomware CWE-787 14/05/2024
Microsoft DWM Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-30040
Alta · 8.8
KEV Alta · 55 CWE-20 14/05/2024
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2024-29988
Alta · 8.8
KEV Alta · 62 Exploit público CWE-693 09/04/2024
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
SmartScreen Prompt Security Feature Bypass Vulnerability
CVE-2024-29059
Alta · 7.5
KEV Alta · 69 Exploit público CWE-209 22/03/2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
CVE-2024-26169
Alta · 7.8
KEV Urgente · 71 Exploit público Ransomware CWE-269 12/03/2024
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-21413
Crítica · 9.8
KEV Alta · 69 Exploit público CWE-20 13/02/2024
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21412
Alta · 8.1
KEV Urgente · 72 Exploit público Ransomware CWE-693 13/02/2024
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21410
Crítica · 9.8
KEV Alta · 68 Exploit público CWE-287 13/02/2024
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2024-21351
Alta · 7.6
KEV Alta · 56 CWE-94 13/02/2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2024-21338
Alta · 7.8
KEV Urgente · 80 Exploit público Ransomware CWE-822 13/02/2024
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-6345
Crítica · 9.6
KEV Alta · 63 CWE-190 29/11/2023
Google Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2023-36424
Alta · 7.8
KEV Alta · 61 Exploit público CWE-125 14/11/2023
Microsoft Windows Out-of-Bounds Read Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036
Alta · 7.8
KEV Alta · 56 CWE-787 14/11/2023
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033
Alta · 7.8
KEV Alta · 55 CWE-119 14/11/2023
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36025
Alta · 8.8
KEV Alta · 62 Exploit público 14/11/2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-41763
Média · 5.3
KEV Alta · 60 Exploit público CWE-918 10/10/2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Skype for Business Elevation of Privilege Vulnerability