Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,598
- Alto21,759
- Medio20,294
- Bajo2,105
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-48392—0.3%
——0——CVE-2023-33911—0.3%
——0——CVE-2023-38458—0.3%
——0——CVE-2026-24929—0.3%
——0——CVE-2025-486045.5 MED0.3%
——0In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2026-411166.3 MED0.3%
——0Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write.100dCVE-2024-40672—0.3%
——0——CVE-2023-38451—0.3%
——0——CVE-2022-47324—0.3%
——0——CVE-2023-52948—0.3%
——0——CVE-2023-30935—0.3%
——0——CVE-2022-47467—0.3%
——0——CVE-2018-9441—0.3%
——0——CVE-2023-42647—0.3%
——0——CVE-2026-410225.9 MED0.3%
——0Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.4dCVE-2025-473366.7 MED0.3%
——0Memory corruption while performing sensor register read operations.24dCVE-2022-47468—0.3%
——0——CVE-2023-30914—0.3%
——0——CVE-2026-1071216.5 MED0.3%
——0A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, Keycloak fails to strictly enforce an encrypted connection, allowing it to fall back to unencrypted communication if the encryption request is tampered with. An attacker who can intercept network traffic can exploit this to capture sensitive email credentials and message content in plain text.24dCVE-2023-30939—0.3%
——0——CVE-2023-30915—0.3%
——0——CVE-2025-54655—0.3%
——0——CVE-2025-20641—0.3%
——0——CVE-2024-27218—0.3%
——0——CVE-2025-32874—0.3%
——0——CVE-2023-30924—0.3%
——0——CVE-2025-20662—0.3%
——0——CVE-2022-47464—0.3%
——0——CVE-2022-20090—0.2%
——0——CVE-2022-48390—0.2%
——0——CVE-2023-21121—0.2%
——0——CVE-2025-48538—0.2%
——0——CVE-2024-56190—0.2%
——0——CVE-2025-36906—0.2%
——0——CVE-2018-9391—0.2%
——0——CVE-2026-25704—0.2%
——0——CVE-2026-111588.6 ALT0.2%
——0Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perform a sandbox escape via a crafted AppleScript command. (Chromium security severity: Medium)100dCVE-2023-38454—0.2%
——0——CVE-2025-26442—0.2%
——0——CVE-2018-9408—0.2%
——0——