Vulnerabilidades explotables hoy
16,768en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,635
- Alto21,783
- Medio20,206
- Bajo2,118
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-963067.8 ALT14.9%
——4Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-963057.0 ALT15.7%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-963047.0 ALT20.2%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-963036.5 MED52.6%
——16Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.5dCVE-2026-963027.0 ALT15.7%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-963017.0 ALT20.2%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-963005.9 MED60.2%
——18Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.8dCVE-2026-962547.0 ALT20.2%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-962537.0 ALT20.2%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-962529.1 CRÍ46.4%
——14Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.8dCVE-2026-962518.8 ALT52.6%
——16Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.5dCVE-2026-962507.0 ALT20.2%
——6Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-962497.8 ALT28.7%
——9Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.11dCVE-2026-962487.5 ALT66.0%
——20Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.11dCVE-2026-962475.5 MED32.5%
——10Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.11dCVE-2026-962467.5 ALT62.1%
——19Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.8dCVE-2026-962457.5 ALT62.1%
——19Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.11dCVE-2026-962447.8 ALT23.7%
——7Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.11dCVE-2026-962437.8 ALT26.4%
——8Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.11dCVE-2026-962386.5 MED22.1%
——7Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.5dCVE-2026-962377.5 ALT50.3%
——15Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.5dCVE-2026-962367.5 ALT65.0%
——20Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.14dCVE-2026-962358.8 ALT58.2%
——17Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.5dCVE-2026-962345.3 MED25.7%
——8Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.5dCVE-2026-962337.5 ALT62.3%
——19Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.5dCVE-2026-962327.5 ALT59.3%
——18Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.5dCVE-2026-962317.8 ALT35.1%
——11Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.5dCVE-2026-962308.8 ALT60.9%
——18Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.5dCVE-2026-962296.5 MED61.0%
——18Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.5dCVE-2026-962257.8 ALT35.1%
——11Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.5dCVE-2026-962248.8 ALT55.0%
——16Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.5dCVE-2026-962237.8 ALT23.7%
——7Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.11dCVE-2026-962227.4 ALT47.8%
——14Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.5dCVE-2026-962207.8 ALT22.6%
——7Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.11dCVE-2026-962199.8 CRÍ59.2%
——18Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.11dCVE-2026-962185.5 MED45.9%
——14Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.11dCVE-2026-962177.8 ALT23.7%
——7Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.11dCVE-2026-962167.0 ALT15.7%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-962157.0 ALT8.4%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.12dCVE-2026-962097.0 ALT20.2%
——6Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.11d