Vulnerabilidades explotables hoy
16,780en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,635
- Alto21,783
- Medio20,206
- Bajo2,118
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-859008.8 ALT74.4%
——22Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.13dCVE-2026-858917.5 ALT60.1%
——18Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.14dCVE-2026-858847.8 ALT38.6%
——12Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.14dCVE-2026-858818.0 ALT52.0%
——16Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.14dCVE-2026-858797.0 ALT12.3%
——4Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.14dCVE-2026-858747.8 ALT29.7%
——9Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.11dCVE-2026-858736.5 MED61.2%
——18Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.11dCVE-2026-858727.8 ALT20.9%
——6Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-858717.8 ALT24.5%
——7Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.11dCVE-2026-858707.0 ALT25.5%
——8Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-858697.8 ALT24.5%
——7Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-858687.0 ALT20.9%
——6Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-858677.8 ALT15.6%
——5Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-858664.7 MED29.3%
——9Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.11dCVE-2026-858655.5 MED21.1%
——6Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.14dCVE-2026-858647.8 ALT54.5%
——16Improper privilege management in Python allows an authorized attacker to elevate privileges locally.11dCVE-2026-858637.8 ALT15.2%
——5Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-858617.8 ALT15.2%
——5Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-858607.8 ALT15.6%
——5Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-858596.5 MED56.0%
——17Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.11dCVE-2026-858587.8 ALT16.5%
——5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.14dCVE-2026-858575.5 MED40.3%
——12Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.11dCVE-2026-858567.1 ALT29.9%
——9Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.11dCVE-2026-858557.0 ALT27.5%
——8Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.14dCVE-2026-858547.0 ALT16.5%
——5Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.11dCVE-2026-858537.0 ALT16.5%
——5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.11dCVE-2026-858525.5 MED33.6%
——10Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.11dCVE-2026-858517.8 ALT25.9%
——8Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.11dCVE-2026-858507.8 ALT27.9%
——8Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-858497.8 ALT41.6%
——12Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-858487.8 ALT30.8%
——9Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-858476.5 MED51.5%
——15Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.11dCVE-2026-858467.0 ALT10.3%
——3Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-858437.8 ALT30.8%
——9Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-858427.8 ALT24.7%
——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.11dCVE-2026-858416.6 MED50.6%
——15Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.14dCVE-2026-858406.5 MED61.1%
——18Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.11dCVE-2026-858377.8 ALT23.8%
——7Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-858367.8 ALT23.8%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-858355.5 MED33.7%
——10Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.14d