Vulnerabilidades explotables hoy
408,074en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,768
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,711
- Alto22,134
- Medio20,663
- Bajo2,168
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-20585—2.6%
——1——CVE-2022-20587—2.6%
——1——CVE-2022-20561—2.6%
——1——CVE-2021-39625—2.6%
——1——CVE-2023-24964—2.6%
——1——CVE-2021-0446—2.6%
——1——CVE-2025-20693—2.6%
——1——CVE-2020-8938—2.6%
——1——CVE-2022-20213—2.6%
——1——CVE-2025-20990—2.6%
——1——CVE-2025-13455—2.6%
——1——CVE-2022-20586—2.6%
——1——CVE-2021-25469—2.6%
——1——CVE-2023-30701—2.6%
——1——CVE-2026-43392—2.6%
——1——CVE-2020-0238—2.6%
——1——CVE-2026-43324—2.6%
——1——CVE-2022-20550—2.6%
——1——CVE-2024-34616—2.6%
——1——CVE-2026-74511—2.6%
——1Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.20dCVE-2026-452773.3 BAJ2.6%
——1Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.106dCVE-2025-12690—2.6%
——1——CVE-2026-28494—2.6%
——1——CVE-2018-25285—2.6%
——1——CVE-2026-314537.8 ALT2.6%
——1In the Linux kernel, the following vulnerability has been resolved:
xfs: avoid dereferencing log items after push callbacks
After xfsaild_push_item() calls iop_push(), the log item may have been
freed if the AIL lock was dropped during the push. Background inode
reclaim or the dquot shrinker can free the log item while the AIL lock
is not held, and the tracepoints in the switch statement dereference
the log item after iop_push() returns.
Fix this by capturing the log item type, flags, and LSN before calling
xfsaild_push_item(), and introducing a new xfs_ail_push_class trace
event class that takes these pre-captured values and the ailp pointer
instead of the log item pointer.17dCVE-2022-22457—2.6%
——1——CVE-2025-41256—2.6%
——1——CVE-2022-20215—2.6%
——1——CVE-2025-400637.0 ALT2.6%
——1In the Linux kernel, the following vulnerability has been resolved:
crypto: comp - Use same definition of context alloc and free ops
In commit 42d9f6c77479 ("crypto: acomp - Move scomp stream allocation
code into acomp"), the crypto_acomp_streams struct was made to rely on
having the alloc_ctx and free_ctx operations defined in the same order
as the scomp_alg struct. But in that same commit, the alloc_ctx and
free_ctx members of scomp_alg may be randomized by structure layout
randomization, since they are contained in a pure ops structure
(containing only function pointers). If the pointers within scomp_alg
are randomized, but those in crypto_acomp_streams are not, then
the order may no longer match. This fixes the problem by removing the
union from scomp_alg so that both crypto_acomp_streams and scomp_alg
will share the same definition of alloc_ctx and free_ctx, ensuring
they will always have the same layout.17dCVE-2025-26478—2.6%
——1——CVE-2026-205515.5 MED2.6%
——1In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.3dCVE-2026-23554—2.6%
——1——CVE-2023-40724—2.6%
——1——CVE-2026-23325—2.6%
——1——CVE-2023-52548—2.6%
——1——CVE-2024-23372—2.6%
——1——CVE-2023-45781—2.6%
——1——CVE-2026-282643.3 BAJ2.6%
——1Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.104dCVE-2026-45982—2.6%
——1——CVE-2026-86377.8 ALT2.6%
——1A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges.11d