Vulnerabilidades explotables hoy
406,817en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,592
- Alto21,789
- Medio20,310
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-52551—1.7%
——1——CVE-2026-23256—1.7%
——1——CVE-2021-0442—1.7%
——1——CVE-2021-35090—1.7%
——1——CVE-2026-1060636.3 MED1.7%
——1A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width * height (and bytes-per-pixel) product that can overflow. GEGL then writes the full uncompressed extent into the undersized buffer, after integer overflow in the allocation size26dCVE-2021-0530—1.7%
——1——CVE-2026-406386.7 MED1.7%
——1Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.8dCVE-2021-0903—1.7%
——1——CVE-2026-3846—1.7%
——1——CVE-2026-534777.8 ALT1.7%
——1Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.74dCVE-2026-638735.5 MED1.7%
——1In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()
aie2_populate_range() jumps back to the again label without calling
mmput(mm), leaking a reference to the mm_struct.
Add the missing mmput() before jumping to again.4dCVE-2026-43454—1.7%
——1——CVE-2026-114356—1.7%
——1Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to invoke privileged operations, including factory reset with user-data wipe (transaction 153), shutdown (105), clock/timezone change (101/123), and the firmware-apply hand-off (151), because onTransact() performs no caller-identity or permission check.6dCVE-2026-21126—1.7%
——1Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.18dCVE-2026-1008673.3 BAJ1.7%
——1spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof displayed text when victims enter the directory.36dCVE-2026-974694.3 MED1.7%
——1PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed inside the sub-select. The problem is resolved in PostgreSQL Anonymizer 3.2.3 and later versions35dCVE-2026-289103.3 BAJ1.7%
——1This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.8dCVE-2026-44992—1.7%
——1——CVE-2022-20111—1.7%
——1——CVE-2025-435248.8 ALT1.7%
——1An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app may be able to break out of its sandbox.20dCVE-2026-737325.6 MED1.7%
——1A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information. Successful exploitation could allow an attacker to retrieve sensitive data which could be used to gain further unauthorized access to the affected system and to other systems it interacts with.61dCVE-2021-0678—1.7%
——1——CVE-2023-21137—1.7%
——1——CVE-2025-48602—1.7%
——1——CVE-2022-43125.5 MED1.7%
——1
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could
allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files
to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code.
Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email
account and SIM card.
117dCVE-2021-0896—1.7%
——1——CVE-2026-43460—1.7%
——1——CVE-2026-755734.4 MED1.7%
——1In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.41dCVE-2022-20017—1.7%
——1——CVE-2024-42182—1.7%
——1——CVE-2024-32537—1.7%
——1——CVE-2025-6044—1.7%
——1——CVE-2023-43694—1.7%
——1——CVE-2021-25462—1.7%
——1——CVE-2022-39905—1.7%
——1——CVE-2021-0376—1.7%
——1——CVE-2026-1098542.5 BAJ1.7%
——1A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.17dCVE-2026-79324.4 MED1.7%
——1Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)8dCVE-2026-31692—1.7%
——1——CVE-2026-97587.3 ALT1.7%
——1Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted8d