Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,274
- Alto9,334
- Medio5,332
- Bajo522
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-21080—1.1%
——0——CVE-2024-20023—1.1%
——0——CVE-2026-495106.1 MED1.1%
——0Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks.
This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f.40dCVE-2026-21023—1.1%
——0——CVE-2026-550596.1 MED1.1%
——0OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf_4_0::SampleCountChannel::set(int r, unsigned int newNumSamples[]). The row-based sample-count setter computes the target Y coordinate with dataWindow.min.x instead of dataWindow.min.y. For a valid deep image data window where min.x != min.y, a valid row index can be translated into an invalid Y coordinate, causing writes before the allocated _numSamples buffer. The vulnerability is reachable through the public OpenEXRUtil DeepImage API and can lead to heap corruption and process crashes. This issue has been fixed in versions 3.2.10, 3.3.12 and 3.4.13.4dCVE-2024-33021—1.1%
——0——CVE-2022-26471—1.1%
——0——CVE-2026-89166.1 MED1.1%
——0Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635.40dCVE-2023-43554—1.1%
——0——CVE-2021-39758—1.1%
——0——CVE-2016-20074—1.1%
——0——CVE-2024-21461—1.1%
——0——CVE-2023-21343—1.1%
——0——CVE-2026-598455.3 MED1.1%
——0A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.14dCVE-2021-39782—1.1%
——0——CVE-2026-473066.1 MED1.1%
——0Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.
This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.40dCVE-2023-32848—1.1%
——0——CVE-2025-71142—1.1%
——0——CVE-2023-21333—1.1%
——0——CVE-2026-252688.8 ALT1.1%
——0Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.55dCVE-2024-21465—1.1%
——0——CVE-2026-3671—1.1%
——0——CVE-2025-25051—1.1%
——0——CVE-2026-710784.2 MED1.1%
——0Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L).7dCVE-2026-54679—1.1%
——0——CVE-2026-31700—1.1%
——0——CVE-2026-20760—1.1%
——0Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.19dCVE-2024-33039—1.1%
——0——CVE-2026-130024.4 MED1.1%
——0A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.3hCVE-2025-21441—1.1%
——0——CVE-2026-43942—1.1%
——0——CVE-2026-24920—1.1%
——0——CVE-2024-45584—1.1%
——0——CVE-2026-28890—1.1%
——0——CVE-2024-43052—1.1%
——0——CVE-2025-21442—1.1%
——0——CVE-2025-54640—1.1%
——0——CVE-2024-49833—1.1%
——0——CVE-2026-277665.5 MED1.1%
——0in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.38dCVE-2022-21746—1.1%
——0——