Vulnerabilidades explotables hoy
406,313en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,562
- Alto21,577
- Medio20,086
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-20248—1.1%
——0——CVE-2026-114593.3 BAJ1.1%
——0A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.102dCVE-2025-48512—1.1%
——0——CVE-2026-4216—1.1%
——0——CVE-2025-486387.8 ALT1.1%
——0In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.25dCVE-2024-485196.2 MED1.1%
——0Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component.5dCVE-2022-21784—1.1%
——0——CVE-2025-38223—1.1%
——0——CVE-2022-21779—1.1%
——0——CVE-2026-93323—1.1%
——0The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which interrupts other builds on the same instance. Fixed by rejecting such files above 16 MiB.27dCVE-2022-36852—1.1%
——0——CVE-2024-31318—1.1%
——0——CVE-2025-306694.8 MED1.1%
——0Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.25dCVE-2026-494335.0 MED1.1%
——0The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacker can change the user's email address and take over their account. Fixed on 2026-05-20.103dCVE-2026-329702.5 BAJ1.1%
——0OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowing fallback to remote credentials in local mode. Attackers can exploit misconfigured local auth references to cause CLI and helper paths to select incorrect credential sources, potentially bypassing intended local authentication boundaries.100dCVE-2026-21119—1.1%
——0Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.16dCVE-2023-48421—1.1%
——0——CVE-2025-47398—1.1%
——0——CVE-2026-769574.9 MED1.1%
——0libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.54dCVE-2022-21786—1.1%
——0——CVE-2026-109984.0 MED1.1%
——0Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)102dCVE-2025-62624—1.1%
——0——CVE-2026-455815.5 MED1.1%
——0fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS private key password in plaintext. An attacker with access to the chaincode server logs could recover the TLS private key password. If the attacker can also obtain the TLS private key, they could impersonate the chaincode server. This issue has been patched in version 2.5.10.102dCVE-2024-20833—1.1%
——0——CVE-2026-252688.8 ALT1.1%
——0Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.7dCVE-2026-22703—1.1%
——0——CVE-2026-188573.4 BAJ1.1%
——0IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.39dCVE-2024-32923—1.1%
——0——CVE-2025-46685—1.1%
——0——CVE-2023-40142—1.1%
——0——CVE-2026-42476—1.1%
——0——CVE-2025-486237.8 ALT1.1%
——0In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.25dCVE-2026-41425—1.1%
——0——CVE-2022-26091—1.1%
——0——CVE-2022-21782—1.1%
——0——CVE-2022-20258—1.1%
——0——CVE-2023-21335—1.1%
——0——CVE-2025-463626.6 MED1.1%
——0Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.14dCVE-2023-21252—1.1%
——0——CVE-2026-103439—1.1%
——0——