Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,576
- Alto21,707
- Medio20,211
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-47350—0.5%
——0——CVE-2026-23342—0.5%
——0——CVE-2023-21302—0.5%
——0——CVE-2026-234205.5 MED0.5%
——0In the Linux kernel, the following vulnerability has been resolved:
wifi: wlcore: Fix a locking bug
Make sure that wl->mutex is locked before it is unlocked. This has been
detected by the Clang thread-safety analyzer.99dCVE-2024-49728—0.5%
——0——CVE-2025-207807.8 ALT0.5%
——0In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712.25dCVE-2023-20812—0.5%
——0——CVE-2025-208036.7 MED0.5%
——0In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10199779; Issue ID: MSV-4504.25dCVE-2023-21083—0.5%
——0——CVE-2023-20929—0.5%
——0——CVE-2025-643115.1 MED0.5%
——0Permission control vulnerability in the Notepad module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.24dCVE-2026-345275.3 MED0.5%
——0Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal incorrectly. The high nibble of each byte is shifted right by 8 instead of 4, which always produces zero for an 8-bit value. As a result, the stored EditPassword hash only preserves the low nibble of each digest byte, reducing the effective entropy from 160 bits to 80 bits. This is layered on top of an unsalted SHA-1 scheme. The reduced entropy makes leaked or backed-up password hashes materially easier to brute-force.
This issue has been fixed in version 1.17.3.99dCVE-2022-20267—0.5%
——0——CVE-2025-663256.2 MED0.5%
——0Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.24dCVE-2026-614641.8 BAJ0.5%
——0ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.2dCVE-2023-32875—0.5%
——0——CVE-2022-48439—0.5%
——0——CVE-2021-0876—0.4%
——0——CVE-2023-20996—0.5%
——0——CVE-2026-23348—0.5%
——0——CVE-2023-20810—0.5%
——0——CVE-2023-32877—0.5%
——0——CVE-2023-20997—0.5%
——0——CVE-2026-473273.3 BAJ0.5%
——0Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.6dCVE-2026-16459—0.5%
——0Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.8dCVE-2026-798352.8 BAJ0.5%
——0A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.16dCVE-2023-21280—0.5%
——0——CVE-2026-46342—0.5%
——0——CVE-2023-40131—0.4%
——0——CVE-2025-596095.5 MED0.5%
——0Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.101dCVE-2023-20782—0.5%
——0——CVE-2023-21306—0.5%
——0——CVE-2023-21145—0.5%
——0——CVE-2026-766675.7 MED0.5%
——0A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.16dCVE-2026-47554—0.5%
——0——CVE-2023-20952—0.5%
——0——CVE-2026-891214.7 MED0.5%
——0SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not authorized for. This results in a high impact on integrity. There is no impact on confidentiality and availability.16dCVE-2026-01984.4 MED0.5%
——0In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.25dCVE-2026-681487.8 ALT0.5%
——0In the Linux kernel, the following vulnerability has been resolved:
fscrypt: Add missing superblock check in find_or_insert_direct_key()
The legacy 'fscrypt_direct_keys' table caches master keys that are used
by v1 encryption policies that have FSCRYPT_POLICY_FLAG_DIRECT_KEY.
It's just a global table for all filesystems (since the keys can be
provided by the legacy process-subscribed keyrings mechanism, which
makes it difficult to reuse super_block::s_master_keys).
The entries in it ('struct fscrypt_direct_key') do contain a super_block
pointer, though, for passing to fscrypt_destroy_inline_crypt_key() when
the last inode that references the key is evicted.
However, when finding the fscrypt_direct_key for an inode, we weren't
actually comparing the super_block pointer. As a result, inodes with
different super_blocks could point to the same fscrypt_direct_key. That
could extend the lifetime of a fscrypt_direct_key beyond the
super_block it points to, causing a use-after-free later.
Fix this by creating distinct fscrypt_direct_key structs for distinct
super_block structs.
Note that this problem doesn't exist in the v2 policy equivalent
("per-mode keys"), since the data structures there are per super_block.12dCVE-2024-20059—0.5%
——0——