Radar de Segurança

CVE-2026-34621 Severidade em análise no catálogo em 13/04/2026

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Adobe · Acrobat and Reader · CWE-1321

Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. EN

CVE-2026-21643 Severidade em análise no catálogo em 13/04/2026

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMS · CWE-89

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. EN

CVE-2025-60710 Severidade em análise Ransomware no catálogo em 13/04/2026

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · CWE-59

Microsoft Windows contains a link following vulnerability that allows for privilege escalation EN

CVE-2023-36424 Severidade em análise no catálogo em 13/04/2026

Microsoft Windows Out-of-Bounds Read Vulnerability

Microsoft · Windows · CWE-125

Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation EN

CVE-2023-21529 Severidade em análise Ransomware no catálogo em 13/04/2026

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. EN

CVE-2020-9715 Severidade em análise no catálogo em 13/04/2026

Adobe Acrobat Use-After-Free Vulnerability

Adobe · Acrobat · CWE-416

Adobe Acrobat contains a use-after-free vulnerability that allows for code execution EN

CVE-2012-1854 Severidade em análise no catálogo em 13/04/2026

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Microsoft · Visual Basic for Applications (VBA) · CWE-426

Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. EN

CVE-2026-1340 Severidade em análise no catálogo em 08/04/2026

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · CWE-94

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. EN

CVE-2026-35616 Severidade em análise no catálogo em 06/04/2026

Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet · FortiClient EMS · CWE-284

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. EN

CVE-2026-5281 Severidade em análise no catálogo em 01/04/2026

Google Dawn Use-After-Free Vulnerability

Google · Dawn · CWE-416

Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2026-3055 Severidade em análise no catálogo em 30/03/2026

Citrix NetScaler Out-of-Bounds Read Vulnerability

Citrix · NetScaler · CWE-125

Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread. EN

CVE-2025-53521 Severidade em análise no catálogo em 27/03/2026

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

F5 · BIG-IP · CWE-121

F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution. EN

CVE-2026-20131 Severidade em análise Ransomware no catálogo em 19/03/2026

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-502

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. EN

CVE-2026-20963 Severidade em análise no catálogo em 18/03/2026

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. EN

CVE-2026-3910 Severidade em análise no catálogo em 13/03/2026

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google · Chromium V8 · CWE-119

Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2026-3909 Severidade em análise no catálogo em 13/03/2026

Google Skia Out-of-Bounds Write Vulnerability

Google · Skia · CWE-787

Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. EN

CVE-2026-1603 Severidade em análise no catálogo em 09/03/2026

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Ivanti · Endpoint Manager (EPM) · CWE-288

Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data. EN

CVE-2026-20127 Severidade em análise no catálogo em 25/02/2026

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco · Catalyst SD-WAN Controller and Manager · CWE-287

Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric. EN

CVE-2022-20775 Severidade em análise no catálogo em 25/02/2026

Cisco SD-WAN Path Traversal Vulnerability

Cisco · SD-WAN · CWE-25, CWE-282

Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. EN

CVE-2026-2441 Severidade em análise no catálogo em 17/02/2026

Google Chromium CSS Use-After-Free Vulnerability

Google · Chromium · CWE-416

Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2008-0015 Severidade em análise no catálogo em 17/02/2026

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. EN

CVE-2024-43468 Severidade em análise no catálogo em 12/02/2026

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft · Configuration Manager · CWE-89

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database. EN

CVE-2026-21533 Severidade em análise no catálogo em 10/02/2026

Microsoft Windows Improper Privilege Management Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally. EN

CVE-2026-21525 Severidade em análise no catálogo em 10/02/2026

Microsoft Windows NULL Pointer Dereference Vulnerability

Microsoft · Windows · CWE-476

Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally. EN