Vulnerabilidades explotables hoy
367,851en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,687
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,393
- Alto9,631
- Medio5,587
- Bajo548
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-24067—3.0%
——1——CVE-2026-46074—3.0%
——1——CVE-2025-7017—3.0%
——1——CVE-2026-4068—3.0%
——1——CVE-2021-0495—3.0%
——1——CVE-2022-24403—3.0%
——1——CVE-2026-46191—3.0%
——1——CVE-2026-24383—3.0%
——1——CVE-2026-41295—3.0%
——1——CVE-2017-13318—3.0%
——1——CVE-2025-14841—3.0%
——1——CVE-2026-28761—3.0%
——1——CVE-2026-461407.1 ALT3.0%
——1In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btmtk: validate WMT event SKB length before struct access
btmtk_usb_hci_wmt_sync() casts the WMT event response SKB data to
struct btmtk_hci_wmt_evt (7 bytes) and struct btmtk_hci_wmt_evt_funcc
(9 bytes) without first checking that the SKB contains enough data.
A short firmware response causes out-of-bounds reads from SKB tailroom.
Use skb_pull_data() to validate and advance past the base WMT event
header. For the FUNC_CTRL case, pull the additional status field bytes
before accessing them.60dCVE-2026-21791—3.0%
——1——CVE-2025-46520—3.0%
——1——CVE-2026-638288.4 ALT3.0%
——1In the Linux kernel, the following vulnerability has been resolved:
apparmor: mediate the implicit connect of TCP fast open sendmsg
sendmsg()/sendto() with MSG_FASTOPEN is a combination of connect(2) and
write(2): it opens the connection in the SYN. apparmor_socket_sendmsg()
only checks AA_MAY_SEND, so a profile that grants send but denies connect
lets a confined task open an outbound TCP/MPTCP connection that connect(2)
would have refused, bypassing connect mediation.
Mediate the implicit connect when MSG_FASTOPEN is set and a destination
is supplied. Add it to apparmor_socket_sendmsg() (not the shared
aa_sock_msg_perm() helper, which recvmsg also uses) and call aa_sk_perm()
directly, mirroring the selinux and tomoyo fixes. sk_is_tcp() does not
cover MPTCP fast open, so the SOCK_STREAM/IPPROTO_MPTCP arm is explicit.16dCVE-2025-39374—3.0%
——1——CVE-2025-54618—3.0%
——1——CVE-2026-43141—3.0%
——1——CVE-2025-4397—3.0%
——1——CVE-2026-2607—3.0%
——1——CVE-2025-92916.5 MED3.0%
——1A
certification validation weakness exists in communication between affected
Omada devices and cloud controllers. Certificate identity verification does not
adequately validate that a presented certificate corresponds to the expected
cloud controller hostname, which may allow certificate validation protections
to be bypassed under specific conditions.
Successful
exploitation may allow interception or modification of communication between
affected devices and cloud controllers.25dCVE-2021-25482—3.0%
——1——CVE-2024-23495—3.0%
——1——CVE-2022-32597—3.0%
——1——CVE-2026-41970—3.0%
——1——CVE-2025-20077—3.0%
——1——CVE-2026-183679.3 CRÍ3.0%
——1A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.5hCVE-2026-43076—3.0%
——1——CVE-2021-0464—3.0%
——1——CVE-2024-1343—3.0%
——1——CVE-2025-46528—3.0%
——1——CVE-2026-31690—3.0%
——1——CVE-2026-23415—3.0%
——1——CVE-2026-46078—3.0%
——1——CVE-2025-27009—3.0%
——1——CVE-2022-33918—3.0%
——1——CVE-2025-26571—3.0%
——1——CVE-2025-48357—3.0%
——1——CVE-2026-18370—3.0%
——1entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy(), which returns the total length of the source string rather than the number of bytes written. When the buffer is exactly filled, the remaining size underflows as an unsigned size_t, causing subsequent copies to write out of bounds. This can be triggered by supplying command-line arguments whose combined length fills the buffer, or via the /_ substitution feature which expands a short token into a longer pathname at runtime. The local attacker can cause memory corruption, process abort, and denial of service.
This issue was fixed in commit 2467fe04d