Vulnerabilidades explotables hoy
406,199en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,580
- Alto21,729
- Medio20,255
- Bajo2,102
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-20104—0.4%
——0——CVE-2025-27037—0.4%
——0——CVE-2025-20660—0.4%
——0——CVE-2022-33718—0.4%
——0——CVE-2022-20118—0.4%
——0——CVE-2026-286167.8 ALT0.4%
——0In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2023-40654—0.4%
——0——CVE-2025-47382—0.4%
——0——CVE-2025-545495.9 MED0.4%
——0Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO24dCVE-2026-286007.8 ALT0.4%
——0In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2022-47478—0.4%
——0——CVE-2025-27077—0.4%
——0——CVE-2022-48233—0.4%
——0——CVE-2022-33701—0.4%
——0——CVE-2022-39134—0.4%
——0——CVE-2026-569457.8 ALT0.4%
——0In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2025-473407.8 ALT0.4%
——0Memory corruption while processing IOCTL call to get the mapping.23dCVE-2022-47479—0.4%
——0——CVE-2025-473517.8 ALT0.4%
——0Memory corruption while processing user buffers.23dCVE-2025-32313—0.4%
——0——CVE-2025-32332—0.4%
——0——CVE-2025-473417.8 ALT0.4%
——0memory corruption while processing an image encoding completion event.23dCVE-2025-270608.8 ALT0.4%
——0Memory corruption while performing SCM call with malformed inputs.23dCVE-2025-22446—0.4%
——0——CVE-2025-21476—0.4%
——0——CVE-2026-286247.8 ALT0.4%
——0In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2022-28794—0.4%
——0——CVE-2025-207957.8 ALT0.4%
——0In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141.25dCVE-2022-47475—0.4%
——0——CVE-2025-48562—0.4%
——0——CVE-2022-47477—0.4%
——0——CVE-2026-543706.3 MED0.4%
——0acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-following operations such as stat(), chown(), chmod(), acl_get_file(), and acl_set_file(). Attackers who control a pathname component can redirect file access control list operations to arbitrary files when getfacl, setfacl, or chacl is invoked by a privileged process over an attacker-controlled path, resulting in local privilege escalation.6dCVE-2026-31572—0.4%
——0——CVE-2025-26440—0.4%
——0——CVE-2022-47457—0.4%
——0——CVE-2022-42771—0.4%
——0——CVE-2026-85628—0.4%
——0Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.43dCVE-2026-326835.3 MED0.4%
——0Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video encryption feature.99dCVE-2023-35664—0.4%
——0——CVE-2022-47453—0.4%
——0——