Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,576
- Alto21,709
- Medio20,211
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-47368—0.4%
——0——CVE-2025-583087.3 ALT0.4%
——0Vulnerability of improper criterion security check in the call module.
Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.24dCVE-2023-21004—0.4%
——0——CVE-2018-9367—0.4%
——0——CVE-2022-33714—0.4%
——0——CVE-2018-9409—0.4%
——0——CVE-2025-485337.0 ALT0.4%
——0In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.31dCVE-2018-9372—0.4%
——0——CVE-2024-20053—0.4%
——0——CVE-2023-21015—0.4%
——0——CVE-2022-38673—0.4%
——0——CVE-2023-20607—0.4%
——0——CVE-2026-938324.4 MED0.4%
——0A component of one of the Motorola system applications was
exported without permission, allowing for the revocation of runtime permissions
from other apps.29dCVE-2022-33731—0.4%
——0——CVE-2026-53638.8 ALT0.4%
——0Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login.
An adjacent attacker with the ability to intercept network traffic could potentially perform a brute-force or factorization attack against the 1024-bit RSA key to recover the plaintext administrator password, leading to unauthorized access and compromise of the device configuration. This issue affects Archer C7: through Build 20220715.5dCVE-2023-21309—0.4%
——0——CVE-2021-0735—0.4%
——0——CVE-2023-21131—0.4%
——0——CVE-2023-40100—0.4%
——0——CVE-2022-47369—0.4%
——0——CVE-2023-20722—0.4%
——0——CVE-2023-21323—0.4%
——0——CVE-2023-21084—0.4%
——0——CVE-2026-252827.9 ALT0.4%
——0Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.39dCVE-2026-210986.1 MED0.4%
——0Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.33dCVE-2022-48243—0.4%
——0——CVE-2023-20809—0.4%
——0——CVE-2022-47487—0.4%
——0——CVE-2024-32906—0.4%
——0——CVE-2026-21024—0.4%
——0Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions.6dCVE-2023-20790—0.4%
——0——CVE-2024-43108—0.4%
——0——CVE-2022-38672—0.4%
——0——CVE-2026-15013.7 BAJ0.4%
——0IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.12dCVE-2023-21005—0.4%
——0——CVE-2023-20808—0.4%
——0——CVE-2026-01834.4 MED0.4%
——0In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.40dCVE-2022-48388—0.4%
——0——CVE-2022-48248—0.4%
——0——CVE-2025-54626—0.4%
——0——