Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,630
- Alto21,866
- Medio20,418
- Bajo2,119
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-34738—0.2%
——0——CVE-2025-59600—0.2%
——0——CVE-2024-20092—0.2%
——0——CVE-2023-20771—0.2%
——0——CVE-2025-486297.8 ALT0.2%
——0In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2026-455193.3 BAJ0.2%
——0In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.37dCVE-2025-207856.7 MED0.2%
——0In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4677.24dCVE-2023-40637—0.2%
——0——CVE-2026-287584.4 MED0.2%
——0When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to the audit log to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated5dCVE-2026-20718—0.2%
——0——CVE-2025-48532—0.2%
——0——CVE-2024-56186—0.2%
——0——CVE-2025-623114.3 MED0.2%
——0HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions24dCVE-2024-20098—0.2%
——0——CVE-2025-22850—0.2%
——0——CVE-2025-224207.8 ALT0.2%
——0In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2024-39429—0.2%
——0——CVE-2024-56187—0.2%
——0——CVE-2024-20099—0.2%
——0——CVE-2026-534067.8 ALT0.2%
——0Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.5dCVE-2023-48347—0.2%
——0——CVE-2024-12236—0.2%
——0——CVE-2024-53018—0.2%
——0——CVE-2025-47321—0.2%
——0——CVE-2025-473947.8 ALT0.2%
——0Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.24dCVE-2024-53836—0.2%
——0——CVE-2026-329887.5 ALT0.2%
——0OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified parent directory. Attackers can exploit a race condition in parent-path alias changes to write attacker-controlled bytes outside the intended validated path before the final guarded replace step executes.98dCVE-2024-43769—0.2%
——0——CVE-2022-47355—0.2%
——0——CVE-2025-47320—0.2%
——0——CVE-2024-20086—0.2%
——0——CVE-2023-48346—0.2%
——0——CVE-2024-45565—0.2%
——0——CVE-2026-178726.1 MED0.2%
——0Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)8dCVE-2023-38446—0.2%
——0——CVE-2025-48558—0.2%
——0——CVE-2023-48340—0.2%
——0——CVE-2024-47017—0.2%
——0——CVE-2025-473567.8 ALT0.2%
——0Memory Corruption when multiple threads concurrently access and modify shared resources.24dCVE-2022-47354—0.2%
——0——