Vulnerabilidades explotables hoy
406,233en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,579
- Alto21,699
- Medio20,217
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-259086.7 MED0.5%
——0Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.6dCVE-2023-20709—0.5%
——0——CVE-2023-20748—0.5%
——0——CVE-2026-473286.1 MED0.5%
——0Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.6dCVE-2026-210265.5 MED0.5%
——0Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.6dCVE-2023-20783—0.5%
——0——CVE-2023-20644—0.5%
——0——CVE-2023-20681—0.5%
——0——CVE-2026-77055—0.5%
——0boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root.
This issue was fixed in version 1.6.0: the image removes the sudoers rule and the docker group membership when it is sealed, and devices already in the field have both removed by migrations shipped with boneio 1.6.0 and applied on first start after the upgrade. Privileged operations now go through helpers that accept only a fixed set of commands, with migrations verified against Ed25519 signatures.6dCVE-2023-21245—0.5%
——0——CVE-2023-20727—0.5%
——0——CVE-2025-54340—0.5%
——0——CVE-2023-20647—0.5%
——0——CVE-2026-23601—0.5%
——0——CVE-2023-56495.5 MED0.5%
——0An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when collecting “supportsave” from a Brocade Switch.18dCVE-2025-63729—0.5%
——0——CVE-2023-20660—0.5%
——0——CVE-2021-0881—0.5%
——0——CVE-2026-543272.2 BAJ0.5%
——0Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth credentials in auth.json. A race condition in the file write path could briefly create or rewrite this file with permissions derived from the process umask before tightening the file to owner-only permissions. This vulnerability is fixed in 0.78.1.6dCVE-2022-48386—0.5%
——0——CVE-2023-21039—0.5%
——0——CVE-2023-20741—0.5%
——0——CVE-2026-842457.8 ALT0.5%
——0IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files.22dCVE-2026-210327.1 ALT0.5%
——0Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.6dCVE-2023-20646—0.5%
——0——CVE-2016-11044—0.5%
——0——CVE-2023-20991—0.5%
——0——CVE-2022-47334—0.5%
——0——CVE-2026-767354.1 MED0.5%
——0A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Instant On, only if certain preconditions outside of the attacker's control are met.32dCVE-2021-0483—0.5%
——0——CVE-2021-0882—0.5%
——0——CVE-2026-210225.5 MED0.5%
——0Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.6dCVE-2023-20784—0.5%
——0——CVE-2022-30753—0.5%
——0——CVE-2023-20813—0.5%
——0——CVE-2022-47352—0.5%
——0——CVE-2023-20710—0.5%
——0——CVE-2022-48236—0.5%
——0——CVE-2024-33043—0.5%
——0——CVE-2023-20653—0.5%
——0——