PULSE
EN
FEED
ransomwhitearmor reclama a wagyu.xyz unfairness · Otherransomwhitearmor reclama a Echo.com · DE · Technologyransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Servicesransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technologyransomwhitearmor reclama a wagyu.xyz unfairness · Otherransomwhitearmor reclama a Echo.com · DE · Technologyransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Servicesransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technology
CVE Watch404,138 en archivo total

Vulnerabilidades explotables hoy

16,791en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691

Distribución · última ventana

  • Crítico
    5,639
  • Alto
    21,796
  • Medio
    20,233
  • Bajo
    2,122
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades8,241–8,280 · 16,791
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1001207.5 ALT
42.1%
——13CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.13dCVE-2026-1001197.5 ALT
42.1%
——13CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.13dCVE-2026-1001187.5 ALT
29.7%
——9CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.11dCVE-2026-1001177.5 ALT
48.8%
——15CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.13dCVE-2026-1001165.9 MED
17.5%
——5CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.13dCVE-2026-1001157.5 ALT
39.3%
——12CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.13dCVE-2026-1001147.5 ALT
39.3%
——12CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.13dCVE-2026-1001137.5 ALT
48.8%
——15CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.11dCVE-2026-973127.8 ALT
7.8%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-969568.0 ALT
48.6%
——15Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.12dCVE-2026-965237.8 ALT
7.8%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-965227.8 ALT
7.8%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-965217.8 ALT
7.8%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-956966.5 MED
26.1%
——8IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.12dCVE-2026-956957.4 ALT
25.1%
——8IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.14dCVE-2026-956417.8 ALT
7.7%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.13dCVE-2026-956405.5 MED
5.8%
——2Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-956398.6 ALT
9.4%
——3Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.14dCVE-2026-956387.8 ALT
13.8%
——4Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-956377.8 ALT
7.8%
——2Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-956367.8 ALT
11.2%
——3Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-956357.8 ALT
10.9%
——3Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-945204.9 MED
57.7%
——17Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.12dCVE-2026-945128.8 ALT
50.9%
——15Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.12dCVE-2026-939099.1 CRÍ
26.8%
——8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.14dCVE-2026-939058.2 ALT
26.1%
——8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.14dCVE-2026-938959.1 CRÍ
33.4%
——10IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.11dCVE-2026-905309.3 CRÍ
27.2%
——8ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.14dCVE-2026-880896.7 MED
23.5%
——7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.12dCVE-2026-880887.0 ALT
14.6%
——4Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.12dCVE-2026-880865.3 MED
29.9%
——9Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.12dCVE-2026-880856.4 MED
15.8%
——5Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.12dCVE-2026-880845.3 MED
52.2%
——16Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.12dCVE-2026-880837.5 ALT
42.4%
——13Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.12dCVE-2026-880827.0 ALT
14.6%
——4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.12dCVE-2026-880817.7 ALT
56.2%
——17Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.12dCVE-2026-859197.0 ALT
14.6%
——4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.12dCVE-2026-858887.7 ALT
56.2%
——17Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.12dCVE-2026-858868.5 ALT
34.5%
——10Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.12dCVE-2026-858767.0 ALT
9.3%
——3Use after free in SQL Server allows an authorized attacker to elevate privileges locally.12d