Vulnerabilidades explotables hoy
16,636en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,117
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-702628.8 ALT60.9%
——18Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.11dCVE-2026-702615.5 MED61.1%
——18Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.11dCVE-2026-702605.5 MED61.1%
——18Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.11dCVE-2026-702596.5 MED59.9%
——18Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.13dCVE-2026-702588.8 ALT60.9%
——18Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.11dCVE-2026-702578.8 ALT59.8%
——18Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12dCVE-2026-702568.8 ALT59.8%
——18Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12dCVE-2026-702557.8 ALT34.4%
——10Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-702548.8 ALT59.2%
——18Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.12dCVE-2026-702537.0 ALT25.8%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5dCVE-2026-702527.0 ALT20.9%
——6Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-702517.5 ALT49.2%
——15Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.13dCVE-2026-702508.8 ALT40.9%
——12Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.14dCVE-2026-702497.0 ALT25.8%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5dCVE-2026-702486.5 MED38.4%
——12Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.11dCVE-2026-702477.8 ALT28.1%
——8Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.11dCVE-2026-702468.8 ALT58.4%
——18Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.13dCVE-2026-702457.8 ALT37.4%
——11Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-702446.5 MED63.9%
——19Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.11dCVE-2026-702437.0 ALT22.5%
——7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.5dCVE-2026-702429.8 CRÍ75.2%
——23Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12dCVE-2026-702417.0 ALT23.0%
——7Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.11dCVE-2026-702387.8 ALT29.7%
——9Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.11dCVE-2026-702377.0 ALT25.5%
——8Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-702367.0 ALT23.2%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5dCVE-2026-702355.5 MED25.6%
——8Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.14dCVE-2026-702345.5 MED37.3%
——11Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.11dCVE-2026-702337.8 ALT42.2%
——13Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-702325.5 MED60.4%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.5dCVE-2026-702307.0 ALT23.3%
——7Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-702298.1 ALT64.5%
——19Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.11dCVE-2026-702287.8 ALT31.0%
——9Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.11dCVE-2026-702275.5 MED40.4%
——12Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.14dCVE-2026-702257.8 ALT32.6%
——10Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-702237.0 ALT24.1%
——7Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.11dCVE-2026-702227.8 ALT34.2%
——10Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.11dCVE-2026-702207.8 ALT38.1%
——11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.12dCVE-2026-702196.5 MED60.8%
——18Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.13dCVE-2026-702187.8 ALT29.6%
——9Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.14dCVE-2026-702174.9 MED61.7%
——19Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.13d