Vulnerabilidades explotables hoy
406,286en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,564
- Alto21,597
- Medio20,095
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-490147.4 ALT0.9%
——0In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry attribute in a crafted NetCDF file. This achieves arbitrary code execution on the server running GDAL. This is in frmts/netcdf/netcdfsg.cpp.100dCVE-2025-93178.4 ALT0.9%
——0The vulnerability, if exploited, could allow a miscreant with read
access to Edge Project files or Edge Offline Cache files to reverse
engineer Edge users' app-native or Active Directory passwords through
computational brute-forcing of weak hashes.14dCVE-2021-25472—0.9%
——0——CVE-2024-0027—0.9%
——0——CVE-2024-21469—0.9%
——0——CVE-2026-587516.7 MED0.9%
——0In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.44dCVE-2024-20142—0.9%
——0——CVE-2022-20318—0.9%
——0——CVE-2024-33031—0.9%
——0——CVE-2022-20394—0.9%
——0——CVE-2026-23188—0.9%
——0——CVE-2024-33030—0.9%
——0——CVE-2026-869617.8 ALT0.9%
——0A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.12dCVE-2024-24692—0.9%
——0——CVE-2022-20355—0.9%
——0——CVE-2023-42680—0.9%
——0——CVE-2026-798175.5 MED0.9%
——0A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information.25dCVE-2025-47366—0.9%
——0——CVE-2023-40117—0.9%
——0——CVE-2026-21237.8 ALT0.9%
——0A security audit identified a privilege escalation
vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions
Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of
Oneconsult AG for reporting this vulnerability100dCVE-2026-926297.3 ALT0.9%
——0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.16dCVE-2024-43049—0.9%
——0——CVE-2025-20642—0.9%
——0——CVE-2026-23161—0.9%
——0——CVE-2024-43048—0.9%
——0——CVE-2026-344905.5 MED0.9%
——0Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data.
This issue affects XAAP Application: before 1.53.9dCVE-2018-9387—0.9%
——0——CVE-2026-31959—0.9%
——0——CVE-2026-10719—0.9%
——0Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a value to 1 via a maliciously crafted NVMe device with a bogus value in the namespace FLBAS byte.102dCVE-2026-20760—0.9%
——0Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.81dCVE-2023-42726—0.9%
——0——CVE-2022-32633—0.9%
——0——CVE-2026-569736.7 MED0.9%
——0In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.44dCVE-2026-944477.8 ALT0.9%
——0Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.17dCVE-2024-23377—0.9%
——0——CVE-2023-42727—0.9%
——0——CVE-2025-20635—0.9%
——0——CVE-2024-38415—0.9%
——0——CVE-2026-553046.7 MED0.9%
——0In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.41dCVE-2026-168026.5 MED0.9%
——0Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.8d