Vulnerabilidades explotables hoy
406,199en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,752
- Medio20,273
- Bajo2,103
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-9407—0.3%
——0——CVE-2022-44429—0.3%
——0——CVE-2023-40653—0.3%
——0——CVE-2025-486035.5 MED0.3%
——0In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2022-44428—0.3%
——0——CVE-2026-323247.7 ALT0.3%
——0Anviz CX7 Firmware is
vulnerable because the application embeds reusable certificate/key
material, enabling decryption of MQTT traffic and potential interaction
with device messaging channels at scale.5dCVE-2023-21001—0.3%
——0——CVE-2023-21080—0.3%
——0——CVE-2023-20935—0.3%
——0——CVE-2023-38438—0.3%
——0——CVE-2022-38685—0.3%
——0——CVE-2026-92543—0.3%
——0Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.23dCVE-2025-214827.1 ALT0.3%
——0Cryptographic issue while performing RSA PKCS padding decoding.36dCVE-2022-20071—0.3%
——0——CVE-2022-47493—0.3%
——0——CVE-2023-21055—0.3%
——0——CVE-2025-32326—0.3%
——0——CVE-2022-33257—0.3%
——0——CVE-2026-704135.6 MED0.3%
——0Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.33dCVE-2025-485867.8 ALT0.3%
——0In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2022-47481—0.3%
——0——CVE-2023-40652—0.3%
——0——CVE-2026-783396.3 MED0.3%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.18dCVE-2026-1092792.5 BAJ0.3%
——0ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.18dCVE-2022-25696—0.3%
——0——CVE-2024-53032—0.3%
——0——CVE-2025-52586—0.3%
——0——CVE-2022-48377—0.3%
——0——CVE-2025-31938—0.3%
——0Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.32dCVE-2026-799755.5 MED0.3%
——0Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to server-side request forgery.46dCVE-2026-286267.3 ALT0.3%
——0In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.46dCVE-2022-48376—0.3%
——0——CVE-2026-286567.3 ALT0.3%
——0In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.46dCVE-2024-45394—0.3%
——0——CVE-2022-47484—0.3%
——0——CVE-2026-285965.5 MED0.3%
——0In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2023-21111—0.3%
——0——CVE-2023-21230—0.3%
——0——CVE-2023-21021—0.3%
——0——CVE-2026-285845.5 MED0.3%
——0In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.46d