Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,687
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,311
- Alto9,414
- Medio5,381
- Bajo529
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-48153—2.6%
——1——CVE-2025-10231—2.6%
——1——CVE-2025-62110—2.6%
——1——CVE-2026-0895—2.6%
——1——CVE-2020-0481—2.6%
——1——CVE-2025-62956—2.6%
——1——CVE-2024-25958—2.6%
——1——CVE-2025-48321—2.6%
——1——CVE-2025-0885—2.6%
——1——CVE-2024-52906—2.6%
——1——CVE-2026-24988—2.6%
——1——CVE-2026-24785—2.6%
——1——CVE-2018-5859—2.6%
——1——CVE-2025-11976—2.6%
——1——CVE-2025-58806—2.6%
——1——CVE-2025-58262—2.6%
——1——CVE-2025-58690—2.6%
——1——CVE-2024-4046—2.6%
——1——CVE-2026-68515—2.6%
——1——CVE-2020-11639—2.6%
——1——CVE-2025-58267—2.6%
——1——CVE-2026-8612—2.6%
——1——CVE-2026-4015—2.6%
——1——CVE-2025-36857—2.6%
——1——CVE-2026-459447.5 ALT2.6%
——1In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Clear Present bit before tearing down context entry
When tearing down a context entry, the current implementation zeros the
entire 128-bit entry using multiple 64-bit writes. This creates a window
where the hardware can fetch a "torn" entry — where some fields are
already zeroed while the 'Present' bit is still set — leading to
unpredictable behavior or spurious faults.
While x86 provides strong write ordering, the compiler may reorder writes
to the two 64-bit halves of the context entry. Even without compiler
reordering, the hardware fetch is not guaranteed to be atomic with
respect to multiple CPU writes.
Align with the "Guidance to Software for Invalidations" in the VT-d spec
(Section 6.5.3.3) by implementing the recommended ownership handshake:
1. Clear only the 'Present' (P) bit of the context entry first to
signal the transition of ownership from hardware to software.
2. Use dma_wmb() to ensure the cleared bit is visible to the IOMMU.
3. Perform the required cache and context-cache invalidation to ensure
hardware no longer has cached references to the entry.
4. Fully zero out the entry only after the invalidation is complete.
Also, add a dma_wmb() to context_set_present() to ensure the entry
is fully initialized before the 'Present' bit becomes visible.39dCVE-2026-22768—2.6%
——1——CVE-2025-8532—2.6%
——1——CVE-2026-664336.5 MED2.6%
——1Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.36dCVE-2026-40145—2.6%
——1A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.15dCVE-2025-48353—2.6%
——1——CVE-2025-52765—2.6%
——1——CVE-2025-58852—2.6%
——1——CVE-2025-58670—2.6%
——1——CVE-2026-71852—2.6%
——1pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.22dCVE-2025-58846—2.6%
——1——CVE-2026-31471—2.6%
——1——CVE-2021-0684—2.6%
——1——CVE-2026-3994—2.6%
——1——CVE-2026-208917.9 ALT2.6%
——1Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.6dCVE-2026-48991—2.6%
——1——