Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,605
- Alto21,780
- Medio20,308
- Bajo2,107
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-20036—0.2%
——0——CVE-2018-9435—0.2%
——0——CVE-2018-9439—0.2%
——0——CVE-2023-32871—0.2%
——0——CVE-2018-9393—0.2%
——0——CVE-2026-22614—0.2%
——0——CVE-2022-48447—0.2%
——0——CVE-2025-473626.1 MED0.2%
——0Information disclosure while processing message from client with invalid payload.13dCVE-2023-40644—0.2%
——0——CVE-2023-40642—0.2%
——0——CVE-2025-36887—0.2%
——0——CVE-2022-20082—0.2%
——0——CVE-2022-39883—0.2%
——0——CVE-2023-40645—0.2%
——0——CVE-2026-95702—0.2%
——0Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.16dCVE-2022-33703—0.2%
——0——CVE-2026-46223—0.2%
——0——CVE-2024-20091—0.2%
——0——CVE-2025-486527.8 ALT0.2%
——0In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.101dCVE-2026-400588.8 ALT0.2%
——0CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft Office Files settings.
An update is available immediately for versions 7.34 and above, 7.32 LTS, and 7.16 for Windows 7/2008 R2 systems. The Falcon sensor for Mac, Linux, and Legacy Systems are not affected.
This vulnerability could expose an arbitrary file write to protected locations from an unprivileged context, potentially leading to local privilege escalation.
The CrowdStrike Laroux Malware Cleanup Tool, based off of the same feature in the CrowdStrike Falcon sensor for Windows, is also affected. An update for this tool is also available immediately.43dCVE-2023-52349—0.2%
——0——CVE-2022-20376—0.2%
——0——CVE-2025-22407—0.2%
——0——CVE-2025-20979—0.2%
——0——CVE-2026-965425.0 MED0.2%
——0Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.12dCVE-2018-9345—0.2%
——0——CVE-2024-23713—0.2%
——0——CVE-2025-20743—0.2%
——0——CVE-2025-20668—0.2%
——0——CVE-2023-38441—0.2%
——0——CVE-2018-9397—0.2%
——0——CVE-2023-20950—0.2%
——0——CVE-2023-21358—0.2%
——0——CVE-2026-43326—0.2%
——0——CVE-2025-207444.2 MED0.2%
——0In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542.13dCVE-2026-0117—0.2%
——0——CVE-2026-286223.3 BAJ0.2%
——0In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2023-38453—0.2%
——0——CVE-2024-49731—0.2%
——0——CVE-2023-21117—0.2%
——0——