PULSE
EN
FEED
ransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***upransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***up
CVE Watch406,233 en archivo total

Vulnerabilidades explotables hoy

406,233en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698

Distribución · última ventana

  • Crítico
    5,579
  • Alto
    21,700
  • Medio
    20,217
  • Bajo
    2,100
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades396,201–396,240 · 406,233
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-0873—
0.5%
——0——CVE-2026-917175.1 MED
0.5%
——0Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)45dCVE-2026-210135.5 MED
0.5%
——0Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.5dCVE-2026-43404—
0.5%
——0——CVE-2023-20652—
0.5%
——0——CVE-2022-48453—
0.5%
——0——CVE-2026-854887.8 ALT
0.5%
——0Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance (OVA) deployments, where default configuration settings remain in place.18dCVE-2023-20695—
0.5%
——0——CVE-2023-20730—
0.5%
——0——CVE-2024-45273—
0.5%
——0——CVE-2025-485845.5 MED
0.5%
——0In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2023-20731—
0.5%
——0——CVE-2026-43420—
0.5%
——0——CVE-2023-20633—
0.5%
——0——CVE-2026-210297.8 ALT
0.5%
——0Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.6dCVE-2025-36335—
0.5%
——0——CVE-2021-0874—
0.5%
——0——CVE-2023-20756—
0.5%
——0——CVE-2021-0872—
0.5%
——0——CVE-2023-20712—
0.5%
——0——CVE-2023-20676—
0.5%
——0——CVE-2023-23349—
0.5%
——0——CVE-2026-210317.8 ALT
0.5%
——0Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.6dCVE-2021-0880—
0.5%
——0——CVE-2023-20658—
0.5%
——0——CVE-2023-20677—
0.5%
——0——CVE-2022-48387—
0.5%
——0——CVE-2023-20649—
0.5%
——0——CVE-2023-20818—
0.5%
——0——CVE-2025-21004—
0.5%
——0——CVE-2026-473265.5 MED
0.5%
——0Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion.6dCVE-2023-20654—
0.5%
——0——CVE-2026-1054648.8 ALT
0.5%
——0IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.19dCVE-2026-53809—
0.5%
——0——CVE-2025-1243—
0.5%
——0——CVE-2026-1026726.7 MED
0.5%
——0Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The helper did not bind the validated update target to one canonical application-bundle path for the full installation, allowing a local attacker to redirect the root-level write so that it overwrites another application's files instead of the application that initiated the update. Applications on other platforms and macOS applications that do not use Squirrel.Mac-based automatic updates are not affected. This issue is fixed in versions 39.8.10, 41.10.5, and 42.0.0-beta.2.15dCVE-2023-20742—
0.5%
——0——CVE-2026-538505.5 MED
0.5%
——0OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows authenticated callers to execute the command without proper authorization checks. Attackers can trigger the focus command to change focus state outside intended caller authority, potentially enabling unauthorized operations depending on gateway configuration and input trust levels.8dCVE-2023-20674—
0.5%
——0——CVE-2024-39674—
0.5%
——0——