Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,576
- Alto21,709
- Medio20,211
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-20967—0.5%
——0——CVE-2024-42183—0.5%
——0——CVE-2025-60263.1 BAJ0.5%
——0An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.24dCVE-2023-21240—0.5%
——0——CVE-2022-33722—0.5%
——0——CVE-2023-21225—0.5%
——0——CVE-2023-32879—0.5%
——0——CVE-2025-486067.8 ALT0.5%
——0In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2023-21247—0.5%
——0——CVE-2022-38677—0.5%
——0——CVE-2023-21326—0.5%
——0——CVE-2022-22094—0.5%
——0——CVE-2025-663304.9 MED0.5%
——0App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.24dCVE-2026-1101505.5 MED0.5%
——0Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)17dCVE-2023-20998—0.5%
——0——CVE-2023-21167—0.5%
——0——CVE-2022-33728—0.5%
——0——CVE-2023-21110—0.4%
——0——CVE-2026-286603.3 BAJ0.5%
——0In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.47dCVE-2023-21248—0.5%
——0——CVE-2024-20012—0.5%
——0——CVE-2023-32819—0.5%
——0——CVE-2024-29752—0.5%
——0——CVE-2023-21090—0.5%
——0——CVE-2023-20698—0.5%
——0——CVE-2023-20999—0.5%
——0——CVE-2025-473237.8 ALT0.5%
——0Memory corruption while routing GPR packets between user and root when handling large data packet.31dCVE-2024-20056—0.5%
——0——CVE-2023-21089—0.5%
——0——CVE-2023-20697—0.5%
——0——CVE-2026-43061—0.5%
——0——CVE-2025-21472—0.5%
——0——CVE-2026-4736—0.5%
——0——CVE-2025-22427—0.5%
——0——CVE-2025-48537—0.5%
——0——CVE-2022-0343—0.5%
——0——CVE-2026-455253.3 BAJ0.5%
——0In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.37dCVE-2026-451972.5 BAJ0.5%
——0Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory.
The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a TOCTOU bug was present which allowed the earlier check results to be invalidated.53dCVE-2023-32839—0.5%
——0——CVE-2022-22093—0.5%
——0——