PULSEUnderground Intel

EN VIVO0señales / 24h

FEED

vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server

← Todos los CVEs

CVE Watch—

CVE-2011-3402

Microsoft Windows Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

78.3%

p100

KEV

SÍ

6 oct 2025

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

78.3%EPSS · 30 días78.3%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Remote Code Execution Vulnerability

Añadido a KEV

6 oct 2025

Remediar antes de

27 oct 2025

Uso conocido en ransomware

No

Descripción resumida

Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 ; https://nvd.nist.gov/vuln/detail/CVE-2011-3402

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-322024.3 MED

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability32d CVE-2025-266337.0 ALT

KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability26d CVE-2024-490398.8 ALT

KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability27d CVE-2024-434618.8 ALT

KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability21d CVE-2024-382175.4 MED

KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability21d