Vulnerabilidades explotables hoy
406,792en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,774
- Medio20,296
- Bajo2,113
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-24854—1.6%
——0——CVE-2026-40191—1.6%
——0ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler only checked the source path of dual-path file operations against File Access Authorization (FAA) rules and App Jail policies. The destination path was ignored entirely. This allowed any local process to bypass file-access protection by using rename, link, copyfile, exchangedata, or clone operations to place or replace files inside protected directories. This vulnerability is fixed in 5.0.4-beta-1f46165.7dCVE-2023-21662—1.6%
——0——CVE-2023-21628—1.6%
——0——CVE-2023-21672—1.6%
——0——CVE-2023-24853—1.6%
——0——CVE-2022-20079—1.6%
——0——CVE-2023-28539—1.6%
——0——CVE-2023-28538—1.6%
——0——CVE-2023-28573—1.6%
——0——CVE-2021-0411—1.6%
——0——CVE-2023-28557—1.6%
——0——CVE-2025-00075.7 MED1.6%
——0Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.26dCVE-2025-677946.1 MED1.6%
——0An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and files created by the agent are created with overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.21dCVE-2024-8885—1.6%
——0——CVE-2026-640349.3 CRÍ1.6%
——0In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
In mana_hwc_rx_event_handler(), resp->response.hwc_msg_id is read from
DMA-coherent memory and bounds-checked, then mana_hwc_handle_resp()
re-reads the same field from the same DMA buffer for test_bit() and
pointer arithmetic.
DMA-coherent memory is mapped uncacheable on x86 and is shared,
unencrypted, in Confidential VMs (SEV-SNP/TDX), so each load goes
directly to host-visible memory. A H/W can modify the value
between the check and the use, bypassing the bounds validation.
Fix this by reading hwc_msg_id exactly once using READ_ONCE() into a
stack-local variable in mana_hwc_rx_event_handler(), and passing the
validated value as a parameter to mana_hwc_handle_resp().14dCVE-2025-20070—1.6%
——0——CVE-2022-33307—1.6%
——0——CVE-2025-4616—1.6%
——0An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.26dCVE-2021-0408—1.6%
——0——CVE-2021-0615—1.6%
——0——CVE-2022-429176.7 MED1.6%
——0In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.41dCVE-2026-480665.7 MED1.6%
——0pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/log.c contains a process-wide static pointer that is written on every PAM invocation with the address of a stack-local variable. This violates the PAM re-entrancy requirement and creates a data race when the PAM stack is invoked concurrently from multiple threads. This vulnerability is fixed in 0.9.1.8dCVE-2021-0623—1.6%
——0——CVE-2022-21769—1.6%
——0——CVE-2025-584223.1 BAJ1.6%
——0RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool.33dCVE-2023-33029—1.6%
——0——CVE-2023-28564—1.6%
——0——CVE-2023-21670—1.6%
——0——CVE-2023-21657—1.6%
——0——CVE-2023-28558—1.6%
——0——CVE-2026-178603.3 BAJ1.6%
——0Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)10dCVE-2023-22667—1.6%
——0——CVE-2021-0611—1.6%
——0——CVE-2026-12885.5 MED1.6%
——0A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.8dCVE-2022-33275—1.6%
——0——CVE-2021-25511—1.6%
——0——CVE-2021-0621—1.6%
——0——CVE-2023-28565—1.6%
——0——CVE-2023-28560—1.6%
——0——