Vulnerabilidades explotables hoy
16,652en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691
Distribución · última ventana
- Crítico5,616
- Alto21,713
- Medio20,119
- Bajo2,111
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-700607.8 ALT37.4%
——11Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.11dCVE-2026-700597.8 ALT32.6%
——10Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.11dCVE-2026-700587.5 ALT71.5%
——21Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.14dCVE-2026-700575.5 MED25.6%
——8Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.11dCVE-2026-700567.0 ALT23.3%
——7Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.11dCVE-2026-700555.5 MED61.1%
——18Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.11dCVE-2026-700547.8 ALT40.2%
——12Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.11dCVE-2026-700527.8 ALT31.1%
——9Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.14dCVE-2026-700517.8 ALT29.7%
——9Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.11dCVE-2026-700498.0 ALT85.6%
——26Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.14dCVE-2026-700487.8 ALT32.6%
——10Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-700457.0 ALT22.5%
——7Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.11dCVE-2026-700445.5 MED47.9%
——14Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.11dCVE-2026-700415.5 MED39.5%
——12Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.11dCVE-2026-700388.1 ALT54.6%
——16Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.11dCVE-2026-700358.8 ALT72.9%
——22Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.5dCVE-2026-700337.5 ALT69.7%
——21Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.11dCVE-2026-700317.5 ALT69.7%
——21Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.11dCVE-2026-700277.8 ALT31.6%
——9Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.11dCVE-2026-700267.0 ALT22.5%
——7Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.11dCVE-2026-700255.3 MED64.8%
——19Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.11dCVE-2026-700249.8 CRÍ61.2%
——18Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.11dCVE-2026-700237.8 ALT31.6%
——9Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.11dCVE-2026-700217.0 ALT22.5%
——7Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.11dCVE-2026-700175.5 MED39.5%
——12Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.11dCVE-2026-700157.8 ALT31.6%
——9Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.11dCVE-2026-700147.5 ALT54.7%
——16Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.11dCVE-2026-700138.1 ALT51.1%
——15Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.8dCVE-2026-700127.5 ALT50.0%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8dCVE-2026-700115.5 MED40.4%
——12Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.22hCVE-2026-700107.8 ALT32.6%
——10Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.22hCVE-2026-700087.8 ALT32.6%
——10Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.22hCVE-2026-700078.8 ALT56.3%
——17Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.5dCVE-2026-700067.5 ALT50.6%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.11dCVE-2026-700055.9 MED50.5%
——15Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.13dCVE-2026-700047.5 ALT50.0%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8dCVE-2026-699995.5 MED39.6%
——12Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.8dCVE-2026-699987.5 ALT50.0%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8dCVE-2026-699977.5 ALT50.0%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8dCVE-2026-699967.5 ALT50.0%
——15Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8d