Vulnerabilidades explotables hoy
16,777en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,635
- Alto21,783
- Medio20,206
- Bajo2,118
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-881516.5 MED57.4%
——17Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.14dCVE-2026-881508.8 ALT54.9%
——16Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.12dCVE-2026-881497.0 ALT10.2%
——3Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-881477.8 ALT27.7%
——8Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.11dCVE-2026-881467.0 ALT8.9%
——3Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-881458.8 ALT54.4%
——16Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.12dCVE-2026-881448.8 ALT60.3%
——18Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.12dCVE-2026-881436.7 MED17.1%
——5Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.11dCVE-2026-881428.8 ALT57.9%
——17Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.11dCVE-2026-881417.0 ALT16.6%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-881405.5 MED33.6%
——10Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.11dCVE-2026-881397.0 ALT17.3%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-881376.5 MED61.1%
——18Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.11dCVE-2026-881368.8 ALT61.1%
——18Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.11dCVE-2026-881357.8 ALT25.1%
——8Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.11dCVE-2026-881347.8 ALT29.7%
——9Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-881337.8 ALT45.8%
——14Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-881325.9 MED24.7%
——7Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.11dCVE-2026-881306.5 MED68.8%
——21Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.12dCVE-2026-881296.5 MED68.8%
——21Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.12dCVE-2026-881287.8 ALT29.7%
——9Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.11dCVE-2026-881277.0 ALT20.9%
——6Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.11dCVE-2026-881267.8 ALT29.7%
——9Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.11dCVE-2026-881256.5 MED68.8%
——21Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.12dCVE-2026-881247.0 ALT16.5%
——5Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-881236.5 MED68.8%
——21Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.12dCVE-2026-881226.5 MED63.2%
——19Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.12dCVE-2026-881218.0 ALT46.0%
——14Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.11dCVE-2026-881208.1 ALT55.6%
——17Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.14dCVE-2026-881198.1 ALT55.6%
——17Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.14dCVE-2026-881187.8 ALT36.0%
——11Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-881178.1 ALT53.3%
——16Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.14dCVE-2026-881168.8 ALT53.6%
——16Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.11dCVE-2026-881158.8 ALT53.6%
——16Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.11dCVE-2026-881148.8 ALT53.0%
——16Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.11dCVE-2026-881137.0 ALT17.3%
——5Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-881128.8 ALT53.0%
——16Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.11dCVE-2026-881107.0 ALT20.9%
——6Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-881097.8 ALT27.2%
——8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.12dCVE-2026-881077.0 ALT4.8%
——1Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.11d