Vulnerabilidades explotables hoy
16,634en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,117
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-836585.5 MED28.2%
——8Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.11dCVE-2026-836575.5 MED20.3%
——6Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.14dCVE-2026-836564.7 MED18.6%
——6Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.11dCVE-2026-836557.5 ALT71.5%
——21Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.11dCVE-2026-836547.8 ALT25.1%
——8Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.11dCVE-2026-836527.8 ALT29.7%
——9Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.11dCVE-2026-836516.5 MED64.5%
——19Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.11dCVE-2026-836507.8 ALT29.7%
——9Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.11dCVE-2026-836496.5 MED68.8%
——21Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.11dCVE-2026-836486.5 MED68.7%
——21Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.11dCVE-2026-836477.5 ALT70.2%
——21Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.11dCVE-2026-836464.8 MED35.7%
——11Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.11dCVE-2026-836457.5 ALT69.2%
——21Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.14dCVE-2026-836447.0 ALT20.9%
——6Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-836438.8 ALT60.9%
——18Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.11dCVE-2026-836428.8 ALT60.3%
——18Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.11dCVE-2026-836417.8 ALT29.7%
——9Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.11dCVE-2026-836407.8 ALT29.7%
——9Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.11dCVE-2026-836397.8 ALT29.7%
——9Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-836387.8 ALT29.7%
——9Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-836377.8 ALT32.6%
——10Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.11dCVE-2026-836366.5 MED38.4%
——12Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.11dCVE-2026-836357.5 ALT70.8%
——21Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.11dCVE-2026-836347.8 ALT29.7%
——9Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.14dCVE-2026-835887.8 ALT29.7%
——9Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-835877.8 ALT29.7%
——9Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.11dCVE-2026-835867.8 ALT25.1%
——8Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.14dCVE-2026-835857.8 ALT29.7%
——9Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.11dCVE-2026-835847.0 ALT20.9%
——6Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.11dCVE-2026-835837.8 ALT27.9%
——8Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.11dCVE-2026-835824.7 MED29.8%
——9Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.11dCVE-2026-835807.0 ALT25.5%
——8Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-835797.8 ALT32.6%
——10Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.11dCVE-2026-835789.8 CRÍ65.0%
——20Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.11dCVE-2026-835757.0 ALT23.3%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-835747.0 ALT23.3%
——7Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-835736.8 MED43.2%
——13Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.11dCVE-2026-835715.5 MED40.4%
——12Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.11dCVE-2026-835707.8 ALT32.6%
——10Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-835697.8 ALT31.0%
——9Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.11d