CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

405 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2023-21529 Alta · 8.8 KEV Alta · 66 Ransomware CWE-502 14/02/2023
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21674 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 10/01/2023
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-44698 Média · 5.4 KEV Alta · 63 Ransomware 13/12/2022
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022
Estouro de Buffer na Heap da GPU do Google Chromium
Estouro de buffer na heap em GPU no Google Chrome anterior à 107.0.5304.121 permitia que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)
CVE-2022-41128 Alta · 8.8 KEV Alta · 59 CWE-787 09/11/2022
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125 Alta · 7.8 KEV Alta · 54 CWE-787 09/11/2022
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41091 Média · 5.4 KEV Alta · 60 Ransomware CWE-863 09/11/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41073 Alta · 7.8 KEV Alta · 64 Ransomware CWE-787 09/11/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41080 Alta · 8.8 KEV Urgente · 72 Exploit público Ransomware 09/11/2022
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41049 Média · 5.4 KEV Alta · 51 09/11/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41033 Alta · 7.8 KEV Alta · 53 CWE-843 11/10/2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028 Alta · 7.8 KEV Alta · 66 11/10/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41040 Alta · 8.8 KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082 Alta · 8.0 KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-37969 Alta · 7.8 KEV Urgente · 72 Exploit público Ransomware CWE-787 13/09/2022
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-34713 Alta · 7.8 KEV Alta · 56 09/08/2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-22047 Alta · 7.8 KEV Alta · 56 CWE-426 12/07/2022
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-30190 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware 01/06/2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVE-2022-26925 Média · 5.9 KEV Alta · 55 CWE-306 10/05/2022
Vulnerabilidade de Spoofing no LSA do Microsoft Windows
Vulnerabilidade de spoofing no LSA do Windows
CVE-2022-26923 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-295 10/05/2022
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-26904 Alta · 7.0 KEV Alta · 68 Exploit público CWE-362 15/04/2022
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24521 Alta · 7.8 KEV Urgente · 71 Exploit público Ransomware CWE-787 15/04/2022
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22718 Alta · 7.8 KEV Alta · 62 Exploit público 09/02/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21999 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware CWE-22 09/02/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21971 Alta · 7.8 KEV Alta · 62 Exploit público CWE-824 09/02/2022
Execução Remota de Código no Microsoft Windows Runtime
Vulnerabilidade de Execução Remota de Código no Windows Runtime