Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,537
- Alto18,434
- Medio17,025
- Bajo1,707
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-10956—99.0%
——30——CVE-2020-139434.3 MED99.0%
——30If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.17dCVE-2026-2441—99.0%
KEV—80Google Chromium CSS Use-After-Free Vulnerability—CVE-2019-11229—99.0%
——30——CVE-2022-38130—99.0%
——30——CVE-2004-0389—99.0%
——30——CVE-2007-4790—99.0%
——30——CVE-2023-50223—99.0%
——30——CVE-2003-0347—99.0%
——30——CVE-2016-6267—99.0%
——30——CVE-2023-40000—99.0%
——30——CVE-2004-0594—99.0%
——30——CVE-2007-2485—99.0%
——30——CVE-2008-2168—99.0%
——30——CVE-2017-9445—99.0%
——30——CVE-2017-11810—99.0%
——30——CVE-2016-33577.8 ALT99.0%
——30Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."10dCVE-2020-35452—99.0%
——30——CVE-2016-0489—99.0%
——30——CVE-2010-2227—99.0%
——30——CVE-2021-26747—99.0%
——30——CVE-2007-2222—99.0%
——30——CVE-2025-580347.2 ALT99.0%
KEV—80Fortinet FortiWeb OS Command Injection Vulnerability7dCVE-2014-5446—99.0%
——30——CVE-2025-441489.8 CRÍ99.0%
——30Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component113dCVE-2022-34718—99.0%
——30——CVE-2007-2888—99.0%
——30——CVE-2012-0270—99.0%
——30——CVE-2013-1305—99.0%
——30——CVE-2011-5124—99.0%
——30——CVE-2006-1547—99.0%
KEV—80Apache Struts 1 ActionForm Denial-of-Service Vulnerability—CVE-2007-3897—99.0%
——30——CVE-2021-40728—99.0%
——30——CVE-2007-1765—99.0%
——30——CVE-2009-4223—99.0%
——30——CVE-2014-4077—99.0%
KEV—80Microsoft IME Japanese Privilege Escalation Vulnerability—CVE-2024-38812—99.0%
KEV—80VMware vCenter Server Heap-Based Buffer Overflow Vulnerability—CVE-2019-6453—99.0%
——30——CVE-2017-8657—99.0%
——30——CVE-2016-0984—99.0%
KEV—80Adobe Flash Player and AIR Use-After-Free Vulnerability—