Vulnerabilidades explotables hoy
403,917en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,117
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1090907.5 ALT—
———A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.3hCVE-2026-117864——
———Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117905——
———Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-1174993.7 BAJ—
———@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the session destroy call, recreating the destroyed session identifier with its authenticated data. An attacker who already holds a victim's valid signed session cookie and keeps a request in flight across the logout can replay that cookie to restore the session after it was meant to be revoked, without any cookie theft or signature forgery. The issue is fixed in @fastify/session 11.1.6, which adds a per session generation marker and a conditional store write so a session restored before a logout or regeneration cannot recreate or overwrite the current entry, and users should upgrade to 11.1.6 or later. There is no workaround, and custom session stores must implement the new conditional write.5hCVE-2026-1123538.2 ALT—
———GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email attachment that bypasses sanitization of event-handler attributes. Attackers can exploit the temporary-download endpoint's insufficient Content-Security-Policy sandbox to execute scripts when the attachment is opened, enabling theft of the victim's credentials and mailbox contents. Proofpoint Threat Research has observed exploitation in the wild as a credential and mailbox stealer.3hCVE-2026-117896——
———Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-117881——
———Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-1175045.3 MED—
———A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributed_manager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.5.0 is sufficient to fix this issue. The name of the patch is 14e41a978b31e134ffa1170d8657f9dd98529aa3. Upgrading the affected component is advised.5hCVE-2026-117880——
———Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-651198.4 ALT—
———NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.5hCVE-2026-117995——
———Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117996——
———Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-907296.7 MED—
———Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.5hCVE-2026-117997——
———Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117998——
———Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117999——
———Race condition in the IPC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117873——
———Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-1137757.8 ALT—
———A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.3hCVE-2026-118000——
———Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-118002——
———Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-118003——
———Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-117904——
———Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-118004——
———Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.5hCVE-2026-118005——
———Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118006——
———Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118007——
———Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.5hCVE-2026-1180088.8 ALT—
———Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.5hCVE-2026-1175665.3 MED—
———EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload extensions from the server.4hCVE-2026-1145959.8 CRÍ—
———In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.3hCVE-2026-117863——
———Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.5hCVE-2026-118009——
———Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118010——
———Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118011——
———Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159.5hCVE-2026-1176017.5 ALT—
———Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and display an invalid zero-fee copy paying an attacker address, tricking users into RBF fee-bumping and signing it.4hCVE-2026-118012——
———Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118013——
———Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159.5hCVE-2026-118014——
———Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.5hCVE-2026-1145968.2 ALT—
———In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.3hCVE-2026-118015——
———Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.5hCVE-2026-1145977.5 ALT—
———In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.3h