Vulnerabilidades explotables hoy
410,051en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,769
Nuevos KEV · 24H0
Exploit Today ≥ 701,700
Distribución · última ventana
- Crítico5,507
- Alto20,886
- Medio20,016
- Bajo2,061
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-48789——
——0Rejected reason: Not used22dCVE-2011-3467——
——0Rejected reason: This candidate is unused by its CNA.22dCVE-2026-23581——
——0Rejected reason: Not used22dCVE-2026-778046.6 MED0.0%
——0In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOCTOU) race condition exists in the installation of the HTTPS interception root certificate into the Local Computer certificate store. Fiddler writes the certificate to a temporary file in a user-writable location and then launches the external TrustCert helper application, which elevates and imports the certificate from that file. A local threat actor with low privileges who replaces the temporary file between the time it is written and the time the elevated helper reads it can cause an attacker-supplied root certificate to be installed in the Local Computer Trusted Root Certification Authorities store, enabling subsequent interception and modification of TLS-protected traffic on the machine. Successful exploitation requires the user to initiate the certificate trust operation and approve the elevation prompt.33dCVE-2025-12561——
——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.23dCVE-2017-4316——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none22dCVE-2026-588345.5 MED0.0%
——0In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.3dCVE-2026-588563.3 BAJ0.0%
——0In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.32dCVE-2017-4641——
——0Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none22dCVE-2025-34825——
——0Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.20dCVE-2026-252607.8 ALT0.0%
——0Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.109d