Vulnerabilidades explotables hoy
367,069en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,242
- Alto9,242
- Medio5,232
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-47357—0.1%
——0——CVE-2023-48420—0.1%
——0——CVE-2023-20750—0.0%
——0——CVE-2026-24413—0.0%
——0——CVE-2023-20942—0.0%
——0——CVE-2025-48608—0.0%
——0——CVE-2026-815305.6 MED0.0%
——0A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked as other secret fields are. A party able to read the application's logs, diagnostic output, or a process memory dump may thereby recover the plaintext credentials and use them to decrypt protected field data.2dCVE-2026-210796.5 MED0.0%
——0Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.12dCVE-2025-66328—0.0%
——0——CVE-2026-28543—0.0%
——0——CVE-2025-41743—0.0%
——0——CVE-2025-264187.8 ALT0.0%
——0In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-0125—0.0%
——0——CVE-2021-25502—0.0%
——0——CVE-2026-240837.8 ALT0.0%
——0Memory Corruption while processing IOCTL device driver requests with invalid arguments.25dCVE-2025-66327—0.0%
——0——CVE-2025-47385—0.0%
——0——CVE-2026-00695.5 MED0.0%
——0In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-256006.4 MED0.0%
——0The PDBM application relies on a static, hard‑coded secret embedded
in the PDBM.exe executable. This secret is used by the application’s
encryption routines, including the function responsible for decrypting
credentials stored in the product’s configuration file. Because the
secret is constant across installations, any attacker with sufficient
local privileges can extract it from the binary. Once obtained, the secret allows the attacker to decrypt the stored
password and authenticate as the user defined in the configuration file.
In the affected version, this user account is configured with
administrative privileges, granting full access to PDBM’s management
interface and its underlying operational functions.40dCVE-2026-20437—0.0%
——0——CVE-2025-54651—0.0%
——0——CVE-2026-285785.5 MED0.0%
——0In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-44509—0.0%
——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate.41dCVE-2024-49724—0.0%
——0——CVE-2026-50267—0.0%
——0——CVE-2026-00997.8 ALT0.0%
——0In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.40dCVE-2023-20801—0.0%
——0——CVE-2025-58740—0.0%
——0——CVE-2026-0153—0.0%
——0——CVE-2023-20620—0.0%
——0——CVE-2026-00795.5 MED0.0%
——0In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.41dCVE-2026-28548—0.0%
——0——CVE-2026-00185.5 MED0.0%
——0In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-169277.3 ALT0.0%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.6dCVE-2026-00503.3 BAJ0.0%
——0In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-419756.3 MED0.0%
——0Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.39dCVE-2024-34725—0.0%
——0——CVE-2023-21101—0.0%
——0——CVE-2026-24930—0.0%
——0——CVE-2026-178726.1 MED0.0%
——0Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)28d