Vulnerabilidades explotables hoy
16,617en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,116
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-837047.8 ALT41.2%
——12Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-837036.5 MED51.9%
——16Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.11dCVE-2026-837027.0 ALT20.9%
——6Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-837017.0 ALT20.9%
——6Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-837007.8 ALT29.7%
——9Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-836997.8 ALT36.0%
——11Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-836987.8 ALT29.7%
——9Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-836974.7 MED13.6%
——4Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.11dCVE-2026-836967.0 ALT20.9%
——6Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-836955.5 MED40.4%
——12Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.11dCVE-2026-836947.0 ALT20.9%
——6Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-836939.8 CRÍ66.1%
——20Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.11dCVE-2026-836927.8 ALT29.7%
——9Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-836917.8 ALT29.7%
——9Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.11dCVE-2026-836907.8 ALT32.6%
——10Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.11dCVE-2026-836897.0 ALT20.9%
——6Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.11dCVE-2026-836888.8 ALT60.9%
——18Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.11dCVE-2026-836877.0 ALT20.9%
——6Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.14dCVE-2026-836865.5 MED40.4%
——12Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.11dCVE-2026-836856.5 MED70.0%
——21Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.11dCVE-2026-836836.5 MED69.9%
——21Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.11dCVE-2026-836827.0 ALT20.9%
——6Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.11dCVE-2026-836815.5 MED27.0%
——8Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.5dCVE-2026-836807.0 ALT17.3%
——5Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-836797.8 ALT29.7%
——9Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.14dCVE-2026-836787.8 ALT29.7%
——9Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.11dCVE-2026-836777.5 ALT66.0%
——20Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.14dCVE-2026-836767.0 ALT20.9%
——6Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.11dCVE-2026-836757.0 ALT23.3%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.14dCVE-2026-836748.1 ALT53.9%
——16Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.14dCVE-2026-836724.7 MED54.1%
——16Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.11dCVE-2026-836716.5 MED40.4%
——12Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.11dCVE-2026-836707.5 ALT65.2%
——20Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.11dCVE-2026-836697.8 ALT37.4%
——11Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.11dCVE-2026-836685.5 MED34.4%
——10Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.11dCVE-2026-836676.5 MED68.7%
——21Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.11dCVE-2026-836667.0 ALT13.2%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.14dCVE-2026-836657.5 ALT71.5%
——21Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.14dCVE-2026-836645.5 MED34.4%
——10Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.11dCVE-2026-836597.8 ALT27.4%
——8Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.11d