Vulnerabilidades explotables hoy
406,402en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,571
- Alto21,585
- Medio20,097
- Bajo2,093
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-5558—1.3%
——0——CVE-2025-594504.3 MED1.3%
——0The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials.24dCVE-2026-798316.6 MED1.3%
——0A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.18dCVE-2024-23376—1.3%
——0——CVE-2021-25363—1.3%
——0——CVE-2023-4328—1.3%
——0——CVE-2026-1088354.4 MED1.3%
——0A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.18dCVE-2023-539969.3 CRÍ1.3%
——0In the Linux kernel, the following vulnerability has been resolved:
x86/sev: Make enc_dec_hypercall() accept a size instead of npages
enc_dec_hypercall() accepted a page count instead of a size, which
forced its callers to round up. As a result, non-page aligned
vaddrs caused pages to be spuriously marked as decrypted via the
encryption status hypercall, which in turn caused consistent
corruption of pages during live migration. Live migration requires
accurate encryption status information to avoid migrating pages
from the wrong perspective.90dCVE-2026-953584.4 MED1.3%
——0Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium)32dCVE-2025-48635—1.3%
——0——CVE-2023-43515—1.3%
——0——CVE-2026-20037—1.3%
——0——CVE-2021-39624—1.3%
——0——CVE-2026-818596.2 MED1.3%
——0CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.55dCVE-2024-23374—1.3%
——0——CVE-2025-36568—1.3%
——0——CVE-2025-70077.5 ALT1.3%
——0NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.37dCVE-2026-1094267.5 ALT1.3%
——0Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than actual encryption. Attackers can round-trip the stored value through the repository's own decode_string function with no secret key to obtain a fully authenticated Telegram session, granting complete control of the operator's Telegram account even when two-step verification is enabled.17dCVE-2026-928614.0 MED1.3%
——0The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.25dCVE-2024-580238.4 ALT1.3%
——0Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.31dCVE-2026-88637.8 ALT1.3%
——0Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.102dCVE-2026-1020047.8 ALT1.3%
——0Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.0934dCVE-2024-23379—1.3%
——0——CVE-2026-798227.1 ALT1.3%
——0A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.18dCVE-2023-21332—1.3%
——0——CVE-2023-4327—1.3%
——0——CVE-2024-56451—1.3%
——0——CVE-2022-33216—1.3%
——0——CVE-2026-475997.8 ALT1.3%
——0NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.32dCVE-2026-20714—1.3%
——0——CVE-2023-33018—1.3%
——0——CVE-2025-84216.6 MED1.3%
——0An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.15dCVE-2026-41398—1.3%
——0——CVE-2025-52642—1.3%
——0——CVE-2026-352493.2 BAJ1.3%
——0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N).7dCVE-2025-526404.7 MED1.3%
——0HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.34dCVE-2023-21333—1.3%
——0——CVE-2026-134658.1 ALT1.3%
——0Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.39dCVE-2023-43513—1.3%
——0——CVE-2025-14605—1.3%
——0——