聚合 NVD、CVE 及多源情資，深度解析 RCE 等高危風險。系統整合 CVSS 與 EPSS 模型，動態追蹤 Exploit 資源與 PoC 公開狀態，研判可利用性。結合官方修補與修復方案，優化漏洞管理優先級，縮短回應週期，保障資產安全。
指派機構（CNA / 來源）：[email protected] 移除此篩選
| CVE | 描述 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|
| CVE-2026-45654 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 7.9 | 0.31% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45653 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 | 0.25% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45650 | User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network. | 4.3 | 0.62% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45649 | Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. | 7.1 | 0.42% | 2026-06-09 | 2026-06-19 |
| CVE-2026-45648 | Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. | 8.8 | 1.12% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45647 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. | 5.5 | 0.20% | 2026-06-09 | 2026-06-18 |
| CVE-2026-45645 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-06-19 |
| CVE-2026-45644 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network. | 8.0 | 0.55% | 2026-06-09 | 2026-06-18 |
| CVE-2026-45643 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-06-19 |
| CVE-2026-45642 | Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack. | 3.9 | 0.26% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45641 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. | 8.4 | 0.31% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45640 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 0.19% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45639 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 7.5 | 0.87% | 2026-06-09 | 2026-06-18 |
| CVE-2026-45638 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.8 | 0.29% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45637 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 | 0.29% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45636 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 7.8 | 0.41% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45635 | Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. | 8.1 | 0.52% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45634 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. | 5.5 | 0.36% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45608 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. | 6.8 | 0.26% | 2026-06-09 | 2026-06-17 |
| CVE-2026-45607 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. | 8.4 | 0.36% | 2026-06-09 | 2026-06-17 |