Vulnerabilidades explotables hoy
406,265en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,582
- Alto21,698
- Medio20,219
- Bajo2,102
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-267587.1 ALT0.8%
——0A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.101dCVE-2025-27052—0.8%
——0——CVE-2025-20640—0.8%
——0——CVE-2023-20753—0.8%
——0——CVE-2025-68959—0.8%
——0——CVE-2025-647407.5 ALT0.8%
——0Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.14dCVE-2022-48463—0.8%
——0——CVE-2022-32645—0.8%
——0——CVE-2023-21652—0.8%
——0——CVE-2022-33700—0.8%
——0——CVE-2025-53170—0.8%
——0——CVE-2023-33899—0.8%
——0——CVE-2024-53009—0.8%
——0——CVE-2023-21129—0.8%
——0——CVE-2023-20630—0.8%
——0——CVE-2022-20252—0.8%
——0——CVE-2022-20442—0.8%
——0——CVE-2023-33064—0.8%
——0——CVE-2025-27061—0.8%
——0——CVE-2023-40125—0.8%
——0——CVE-2023-20739—0.8%
——0——CVE-2026-42479—0.8%
——0——CVE-2026-0314—0.8%
——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.17dCVE-2022-20329—0.8%
——0——CVE-2025-270456.1 MED0.8%
——0Information disclosure while processing batch command execution in Video driver.24dCVE-2026-0122—0.8%
——0——CVE-2022-25815—0.8%
——0——CVE-2026-151027.5 ALT0.8%
——0ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.16dCVE-2023-33884—0.8%
——0——CVE-2025-485905.5 MED0.8%
——0In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.25dCVE-2022-36854—0.8%
——0——CVE-2026-02383.2 BAJ0.8%
——0A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.6dCVE-2026-502097.8 ALT0.8%
——0Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.102dCVE-2025-0079—0.8%
——0——CVE-2026-42481—0.8%
——0——CVE-2025-53176—0.8%
——0——CVE-2025-12683—0.8%
——0The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL and thus provides all users full permission over it; leading to potential Service Denial Of Service or Privilege escalation(only if chained with other elements) for a local low privilege user.14dCVE-2026-556285.5 MED0.8%
——0ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.95dCVE-2026-436594.7 MED0.8%
——0A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.7dCVE-2022-32623—0.8%
——0——