Vulnerabilidades explotables hoy
406,402en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,571
- Alto21,586
- Medio20,097
- Bajo2,093
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-21344—1.2%
——0——CVE-2024-28024—1.2%
——0——CVE-2025-21441—1.2%
——0——CVE-2023-21002—1.2%
——0——CVE-2026-438207.7 ALT1.2%
——0NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.9dCVE-2021-0417—1.2%
——0——CVE-2024-43056—1.2%
——0——CVE-2025-21443—1.2%
——0——CVE-2026-642824.7 MED1.2%
——0In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
In the case that kvm_translate_vncr() races with an MMU notifier the
early return does not release a reference on the faulted in PFN. Add
the necessary call to kvm_release_faultin_page() for the unused PFN.77dCVE-2026-3671—1.2%
——0——CVE-2025-14596—1.2%
——0——CVE-2025-136656.7 MED1.2%
——0The System Console Utility for Windows is vulnerable to a DLL planting vulnerability26dCVE-2023-33067—1.2%
——0——CVE-2025-21438—1.2%
——0——CVE-2023-41970—1.2%
——0——CVE-2026-790555.1 MED1.2%
——0Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)68dCVE-2024-49837—1.2%
——0——CVE-2026-788065.5 MED1.2%
——0An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component39dCVE-2023-33068—1.2%
——0——CVE-2026-737975.3 MED1.2%
——0A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.19dCVE-2021-0422—1.2%
——0——CVE-2023-43526—1.2%
——0——CVE-2026-876725.5 MED1.2%
——0An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support bundle, such as support personnel or users with access to file shares where support bundles are stored, can extract these cleartext proxy credentials.19dCVE-2026-875252.7 BAJ1.2%
——0Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)53dCVE-2024-10404—1.2%
——0——CVE-2026-3675—1.2%
——0——CVE-2025-21421—1.2%
——0——CVE-2025-21442—1.2%
——0——CVE-2026-24928—1.2%
——0——CVE-2026-11836—1.2%
——0Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production debug on an unintended device by presenting a valid token issued for a different device sharing the same debug unlock key hash. The 384-bit challenge nonce continues to prevent replay of previously issued tokens. Practical impact is limited to loss of per-device scope enforcement within a set of devices that share the same unlock authority by design; it does not enable debug unlock on devices outside that set.
This issue affects Core ROM: 2.0.0 through 2.0.2, 2.1.0 through 2.1.1; Core Firmware: 2.0.0 through 2.0.1, 2.1.0.60dCVE-2026-200646.5 MED1.2%
——0A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition.
This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.83dCVE-2025-581234.8 MED1.2%
——0Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic.37dCVE-2026-205876.7 MED1.2%
——0In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.3dCVE-2026-711697.0 ALT1.2%
——0Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information13dCVE-2023-33065—1.2%
——0——CVE-2025-22493—1.2%
——0——CVE-2026-4243—1.2%
——0——CVE-2021-0320—1.2%
——0——CVE-2024-23355—1.2%
——0——CVE-2024-45557—1.2%
——0——