Vulnerabilidades explotables hoy
406,215en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,583
- Alto21,734
- Medio20,262
- Bajo2,102
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-179937.0 ALT0.4%
——0Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)8dCVE-2026-43415—0.4%
——0——CVE-2023-20823—0.4%
——0——CVE-2023-21128—0.4%
——0——CVE-2021-39642—0.4%
——0——CVE-2024-25984—0.4%
——0——CVE-2026-2364—0.4%
——0——CVE-2023-21068—0.4%
——0——CVE-2022-47327—0.4%
——0——CVE-2025-7383—0.4%
——0Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.13dCVE-2023-21033—0.4%
——0——CVE-2023-21364—0.4%
——0——CVE-2022-44419—0.4%
——0——CVE-2026-1180407.5 ALT0.4%
——0In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.3dCVE-2026-258526.7 MED0.4%
——0Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.5dCVE-2024-34733—0.4%
——0——CVE-2018-9368—0.4%
——0——CVE-2022-47333—0.4%
——0——CVE-2026-207726.7 MED0.4%
——0Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.102dCVE-2026-1161168.2 ALT0.4%
——0A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.5dCVE-2022-47365—0.4%
——0——CVE-2026-31728—0.4%
——0——CVE-2024-23710—0.4%
——0——CVE-2022-44448—0.4%
——0——CVE-2023-21016—0.4%
——0——CVE-2026-240757.8 ALT0.4%
——0Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.39dCVE-2018-9474—0.4%
——0——CVE-2026-24510—0.4%
——0——CVE-2022-44447—0.4%
——0——CVE-2026-780186.3 MED0.4%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.18dCVE-2026-286207.8 ALT0.4%
——0In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2026-43448—0.4%
——0——CVE-2022-33702—0.4%
——0——CVE-2026-904576.2 MED0.4%
——0The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing algorithm used for the same password on another authentication path. A party able to read this file, including a local user or a party with access to a configuration backup, could feasibly recover the underlying password through offline computation, compromising the administrative credential across every path that accepts it.29dCVE-2025-26453—0.4%
——0——CVE-2025-36899—0.4%
——0——CVE-2022-36856—0.4%
——0——CVE-2025-37112—0.4%
——0——CVE-2023-20781—0.4%
——0——CVE-2026-31751—0.4%
——0——