Vulnerabilidades explotables hoy
16,613en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,116
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-837945.5 MED38.9%
——12Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.11dCVE-2026-837937.0 ALT25.5%
——8Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-837927.8 ALT25.1%
——8Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-837917.8 ALT25.1%
——8Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.11dCVE-2026-837907.0 ALT20.9%
——6Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.11dCVE-2026-837898.8 ALT58.5%
——18Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.11dCVE-2026-837884.6 MED44.0%
——13Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.11dCVE-2026-837875.5 MED25.6%
——8Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.13dCVE-2026-837864.7 MED53.0%
——16Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.11dCVE-2026-837857.0 ALT25.5%
——8Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-837848.8 ALT64.9%
——19Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.11dCVE-2026-837837.8 ALT29.7%
——9Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.11dCVE-2026-837829.8 CRÍ62.9%
——19Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.11dCVE-2026-837817.8 ALT29.7%
——9Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.14dCVE-2026-837809.8 CRÍ65.0%
——20Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.14dCVE-2026-837797.8 ALT29.7%
——9Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837788.8 ALT59.8%
——18Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.11dCVE-2026-837778.8 ALT49.5%
——15Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.11dCVE-2026-837766.8 MED43.2%
——13Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.11dCVE-2026-837757.0 ALT14.4%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837744.7 MED53.6%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.6dCVE-2026-837735.5 MED61.1%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.14dCVE-2026-837718.8 ALT49.5%
——15Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.14dCVE-2026-837709.8 CRÍ66.1%
——20Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.11dCVE-2026-837697.8 ALT35.7%
——11Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.11dCVE-2026-837687.8 ALT33.4%
——10Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.6dCVE-2026-837677.8 ALT23.6%
——7Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837664.2 MED34.8%
——10Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.11dCVE-2026-837655.5 MED34.4%
——10Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.11dCVE-2026-837645.5 MED28.2%
——8Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.11dCVE-2026-837637.8 ALT34.4%
——10Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.11dCVE-2026-837627.8 ALT29.7%
——9Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.11dCVE-2026-837617.8 ALT36.4%
——11Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-837605.5 MED32.7%
——10Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.11dCVE-2026-837598.8 ALT60.2%
——18Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.11dCVE-2026-837587.8 ALT29.7%
——9Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.11dCVE-2026-837577.8 ALT29.7%
——9Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.14dCVE-2026-837567.8 ALT25.3%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.6dCVE-2026-837555.5 MED40.4%
——12Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.11dCVE-2026-837547.5 ALT52.0%
——16Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.11d