Vulnerabilidades explotables hoy
406,199en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,588
- Alto21,752
- Medio20,273
- Bajo2,103
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1062545.1 MED0.3%
——0Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium)25dCVE-2023-21365—0.3%
——0——CVE-2025-54464—0.3%
——0——CVE-2025-32350—0.3%
——0——CVE-2025-48547—0.3%
——0——CVE-2023-21318—0.3%
——0——CVE-2022-21772—0.3%
——0——CVE-2023-21362—0.3%
——0——CVE-2025-207466.7 MED0.3%
——0In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.13dCVE-2024-22009—0.3%
——0——CVE-2022-21771—0.3%
——0——CVE-2025-270306.1 MED0.3%
——0information disclosure while invoking calibration data from user space to update firmware size.36dCVE-2025-124395.5 MED0.3%
——0Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)24dCVE-2025-473677.8 ALT0.3%
——0Memory corruption while accessing a buffer during IOCTL processing.13dCVE-2026-108361—0.3%
——0Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence was successfully appraised and the connection was established, there was a window of vulnerability from the establishment of the connection to the termination of the connection where an attacker could modify the state of the workload and platform at runtime on the TLS endpoint acting as the Attester. This vulnerability was possible because Privasys/ra-tls-clients performed attestation only once in the lifetime of the connection (at connection establishment time), and the verifying peer continued to believe that the state was the same as in the initial Evidence throughout, whereas it could be stale at some point in time. This vulnerability is fixed in 0.9.1.15dCVE-2025-473657.8 ALT0.3%
——0Memory corruption while processing large input data from a remote source via a communication interface.13dCVE-2024-29738—0.3%
——0——CVE-2021-0532—0.3%
——0——CVE-2024-45546—0.3%
——0——CVE-2023-40106—0.3%
——0——CVE-2026-2638—0.3%
——0A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption.101dCVE-2024-20105—0.3%
——0——CVE-2025-546027.0 ALT0.3%
——0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.99dCVE-2024-23712—0.3%
——0——CVE-2023-21316—0.3%
——0——CVE-2026-1099685.5 MED0.3%
——0A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read the log file to obtain the LUKS passphrase.2dCVE-2025-473607.8 ALT0.3%
——0Memory corruption while processing client message during device management.13dCVE-2021-0432—0.3%
——0——CVE-2026-20443—0.3%
——0——CVE-2025-643907.4 ALT0.3%
——0A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR file.101dCVE-2023-21348—0.3%
——0——CVE-2024-47123—0.3%
——0——CVE-2023-21301—0.3%
——0——CVE-2026-1065873.6 BAJ0.3%
——0In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.22dCVE-2024-29742—0.3%
——0——CVE-2026-30785—0.3%
——0——CVE-2025-21433—0.3%
——0——CVE-2025-583115.8 MED0.3%
——0UAF vulnerability in the USB driver module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.13dCVE-2022-21773—0.3%
——0——CVE-2025-473687.8 ALT0.3%
——0Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.13d