Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,274
- Alto9,335
- Medio5,332
- Bajo522
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-25428—1.0%
——0——CVE-2025-35973—1.0%
——0Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.19dCVE-2026-206177.0 ALT1.0%
——0A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges.11dCVE-2026-6839—1.0%
——0——CVE-2026-32918—1.0%
——0——CVE-2025-14115—1.0%
——0——CVE-2022-30728—1.0%
——0——CVE-2026-188224.4 MED1.0%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.6dCVE-2022-26455—1.0%
——0——CVE-2026-41886—1.0%
——0——CVE-2022-20417—1.0%
——0——CVE-2024-47968—1.0%
——0——CVE-2022-32608—1.0%
——0——CVE-2025-41259—1.0%
——0SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.40dCVE-2022-20467—1.0%
——0——CVE-2023-21331—1.0%
——0——CVE-2026-105845.9 MED1.0%
——0Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS.
To remediate this issue, users should upgrade to Graph Explorer v3.0.1 or later.40dCVE-2026-20713—1.0%
——0Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.19dCVE-2026-178647.8 ALT1.0%
——0Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)28dCVE-2026-636936.6 MED1.0%
——0Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write3dCVE-2024-20141—1.0%
——0——CVE-2024-51394—1.0%
——0——CVE-2026-168555.5 MED1.0%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.7dCVE-2022-20290—1.0%
——0——CVE-2026-0539—1.0%
——0——CVE-2023-21387—1.0%
——0——CVE-2023-20976—1.0%
——0——CVE-2025-36100—1.0%
——0——CVE-2023-21098—1.0%
——0——CVE-2026-58894.3 MED1.0%
——0Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)42dCVE-2022-26454—1.0%
——0——CVE-2022-25831—1.0%
——0——CVE-2023-21093—1.0%
——0——CVE-2023-21268—1.0%
——0——CVE-2022-20327—1.0%
——0——CVE-2024-29740—1.0%
——0——CVE-2024-20050—1.0%
——0——CVE-2025-48639—1.0%
——0——CVE-2022-20270—1.0%
——0——CVE-2022-26449—1.0%
——0——