Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,632
- Alto21,880
- Medio20,425
- Bajo2,120
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-48460—0.2%
——0——CVE-2025-663235.3 MED0.2%
——0Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability.24dCVE-2024-32901—0.2%
——0——CVE-2025-20028—0.2%
——0——CVE-2023-38447—0.2%
——0——CVE-2025-473937.8 ALT0.2%
——0Memory corruption when accessing resources in kernel driver.24dCVE-2024-27210—0.2%
——0——CVE-2025-22431—0.2%
——0——CVE-2024-20134—0.2%
——0——CVE-2025-207817.8 ALT0.2%
——0In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4699.24dCVE-2024-27222—0.2%
——0——CVE-2026-111037.8 ALT0.2%
——0Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)100dCVE-2025-26461—0.2%
——0——CVE-2022-47356—0.2%
——0——CVE-2023-48352—0.2%
——0——CVE-2026-112765.1 MED0.2%
——0Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious network traffic. (Chromium security severity: Low)100dCVE-2024-384877.0 ALT0.2%
——0api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions.30dCVE-2024-56185—0.2%
——0——CVE-2026-499585.0 MED0.2%
——0Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete files outside the configured workspace boundary by replacing a validated path component with a symlink after validation but before deletion. Attackers can substitute a workspace-controlled path component with a symlink pointing to an external directory between the safe_resolve_ws() validation step and the subsequent Path.unlink() or shutil.rmtree() deletion call, causing the delete operation to follow the symlink and remove arbitrary files outside the workspace.100dCVE-2022-20396—0.2%
——0——CVE-2023-28124—0.2%
——0——CVE-2024-40654—0.2%
——0——CVE-2023-48351—0.2%
——0——CVE-2024-20087—0.2%
——0——CVE-2025-583038.4 ALT0.2%
——0UAF vulnerability in the screen recording framework module.
Impact: Successful exploitation of this vulnerability may affect availability.13dCVE-2023-48348—0.2%
——0——CVE-2025-22415—0.1%
——0——CVE-2025-47381—0.1%
——0——CVE-2023-42646—0.1%
——0——CVE-2026-735987.8 ALT0.1%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.25dCVE-2025-270415.5 MED0.1%
——0Transient DOS while processing video packets received from video firmware.23dCVE-2026-111157.3 ALT0.1%
——0Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)100dCVE-2023-42654—0.1%
——0——CVE-2025-22418—0.1%
——0——CVE-2023-52535—0.1%
——0——CVE-2023-20619—0.1%
——0——CVE-2024-53833—0.1%
——0——CVE-2024-20111—0.1%
——0——CVE-2024-44092—0.1%
——0——CVE-2023-42641—0.1%
——0——