Vulnerabilidades explotables hoy
367,069en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,242
- Alto9,242
- Medio5,232
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-0697—0.1%
——0——CVE-2026-462984.7 MED0.1%
——0In the Linux kernel, the following vulnerability has been resolved:
pseries/papr-hvpipe: Fix race with interrupt handler
While executing ->ioctl handler or ->release handler, if an interrupt
fires on the same cpu, then we can enter into a deadlock.
This patch fixes both these handlers to take spin_lock_irq{save|restore}
versions of the lock to prevent this deadlock.39dCVE-2026-65055.1 MED0.1%
——0The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.20dCVE-2025-20800—0.1%
——0——CVE-2024-47033—0.1%
——0——CVE-2025-27049—0.1%
——0——CVE-2026-0131—0.1%
——0——CVE-2025-36921—0.1%
——0——CVE-2025-47376—0.1%
——0——CVE-2026-00435.5 MED0.1%
——0In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2024-47029—0.1%
——0——CVE-2025-323487.8 ALT0.1%
——0In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2023-35645—0.1%
——0——CVE-2024-0028—0.1%
——0——CVE-2018-9344—0.1%
——0——CVE-2025-21485—0.1%
——0——CVE-2025-59600—0.1%
——0——CVE-2026-0134—0.1%
——0——CVE-2025-47386—0.1%
——0——CVE-2024-49735—0.1%
——0——CVE-2025-9142—0.1%
——0——CVE-2022-26428—0.1%
——0——CVE-2023-21120—0.1%
——0——CVE-2026-34858—0.1%
——0——CVE-2025-20802—0.1%
——0——CVE-2026-12374—0.1%
——0Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.60dCVE-2026-167926.1 MED0.1%
——0An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.7dCVE-2026-43053—0.1%
——0——CVE-2025-47406—0.1%
——0——CVE-2025-47388—0.1%
——0——CVE-2025-47357—0.1%
——0——CVE-2023-48420—0.1%
——0——CVE-2025-52532—0.1%
——0——CVE-2017-13312—0.1%
——0——CVE-2017-13311—0.1%
——0——CVE-2017-13314—0.1%
——0——CVE-2026-24929—0.1%
——0——CVE-2025-21481—0.1%
——0——CVE-2026-20908—0.1%
——0Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.18dCVE-2023-6728—0.1%
——0——