Vulnerabilidades explotables hoy
16,639en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,711
- Medio20,117
- Bajo2,110
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-702165.5 MED28.5%
——9Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.11dCVE-2026-702158.8 ALT60.3%
——18Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.12dCVE-2026-702145.5 MED46.7%
——14Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.13dCVE-2026-702138.0 ALT32.4%
——10Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.11dCVE-2026-702127.0 ALT19.6%
——6Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.11dCVE-2026-702115.5 MED39.5%
——12Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.5dCVE-2026-702108.8 ALT60.9%
——18Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.11dCVE-2026-702097.0 ALT22.5%
——7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5dCVE-2026-702085.5 MED39.0%
——12Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.11dCVE-2026-702077.5 ALT54.7%
——16Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.11dCVE-2026-702066.5 MED61.7%
——19Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.12dCVE-2026-702057.0 ALT23.3%
——7Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-702027.5 ALT47.1%
——14Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.13dCVE-2026-702015.5 MED40.0%
——12Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.14dCVE-2026-701995.5 MED60.4%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.5dCVE-2026-701987.0 ALT23.3%
——7Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.11dCVE-2026-701978.1 ALT55.9%
——17Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.2dCVE-2026-701965.9 MED59.7%
——18Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.14dCVE-2026-701954.7 MED18.3%
——6Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.11dCVE-2026-701946.5 MED41.6%
——12Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.5dCVE-2026-701907.3 ALT41.9%
——13Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.5dCVE-2026-701889.1 CRÍ60.6%
——18Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.14dCVE-2026-701878.1 ALT55.6%
——17Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.14dCVE-2026-701867.5 ALT61.3%
——18Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.14dCVE-2026-701858.8 ALT23.7%
——7Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.11dCVE-2026-701847.8 ALT37.1%
——11Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.11dCVE-2026-701837.5 ALT44.6%
——13Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.14dCVE-2026-701817.5 ALT68.7%
——21Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.14dCVE-2026-701797.5 ALT49.9%
——15Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.5dCVE-2026-701777.8 ALT29.7%
——9Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.11dCVE-2026-701767.0 ALT25.8%
——8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.5dCVE-2026-701758.1 ALT54.0%
——16Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.14dCVE-2026-701748.8 ALT59.8%
——18Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.5dCVE-2026-701735.5 MED38.9%
——12Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.11dCVE-2026-701727.8 ALT32.6%
——10Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.11dCVE-2026-701706.5 MED68.8%
——21Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.5dCVE-2026-701697.0 ALT12.3%
——4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-701687.0 ALT23.3%
——7Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.11dCVE-2026-701678.8 ALT62.1%
——19Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.11dCVE-2026-701666.5 MED70.0%
——21Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.11d