Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-83935
Crítica · 9.8
CWE-122 13/10/2026
Microsoft XML Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83910
Crítica · 9.8
CWE-787 13/10/2026
RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-83869
Crítica · 9.8
CWE-191 13/10/2026
Windows Domain Name Service Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83862
Crítica · 9.8
CWE-416 13/10/2026
Windows Network Load Balancing Remote Code Execution Vulnerability
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVE-2026-83782
Crítica · 9.8
CWE-122 13/10/2026
Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-83780
Crítica · 9.8
CWE-416 13/10/2026
Windows CCFFilter Driver Remote Code Execution Vulnerability
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83770
Crítica · 9.8
CWE-122 13/10/2026
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-83748
Crítica · 9.8
CWE-122 13/10/2026
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83693
Crítica · 9.8
CWE-122 13/10/2026
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83578
Crítica · 9.8
CWE-122 13/10/2026
Microsoft PowerShell Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83519
Crítica · 9.8
CWE-122 13/10/2026
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83517
Crítica · 9.8
CWE-122 13/10/2026
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-75120
Crítica · 9.3
CWE-290 13/10/2026
Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
CVE-2026-70300
Crítica · 9.8
CWE-822 13/10/2026
Microsoft Office Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70291
Crítica · 9.8
CWE-122 13/10/2026
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70279
Crítica · 9.3
CWE-79 13/10/2026
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70242
Crítica · 9.8
CWE-122 13/10/2026
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70188
Crítica · 9.1
CWE-444 13/10/2026
ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70157
Crítica · 9.8
CWE-122 13/10/2026
Windows System Information Console Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVE-2026-70153
Crítica · 9.8
CWE-122 13/10/2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70147
Crítica · 9.8
CWE-122 13/10/2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70096
Crítica · 9.8
CWE-122 13/10/2026
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
CVE-2026-70024
Crítica · 9.8
CWE-20 13/10/2026
Windows Internet Information Services Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69886
Crítica · 9.8
CWE-122 13/10/2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69883
Crítica · 9.8
CWE-416 13/10/2026
Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.