Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
828 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 15% | — | Microsoft Windows 7Microsoft Windows Server 2003Microsoft Windows VistaMicrosoft Windows XP | 20/2/2020 | 16/6/2026 | The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. | |
| Modificada | Alta (7.5) | 15% | — | Microsoft Windows 7Microsoft Windows Server 2003Microsoft Windows VistaMicrosoft Windows XP | 20/2/2020 | 16/6/2026 | The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2010-4669. | |
| Modificada | Media (5.5) | 2.9% | 💥 PoC | Microsoft Windows 7Microsoft Windows 8Microsoft Windows 8.1Microsoft Windows Vista+1 | 26/2/2018 | 17/6/2026 | An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool… | |
| Modificada | Alta (7) | 1.5% | 💥 PoC | Microsoft Windows 7Microsoft Windows 8Microsoft Windows 8.1Microsoft Windows Vista+1 | 26/2/2018 | 17/6/2026 | An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker… | |
| Modificada | Alta (7.8) | 1.8% | — | Jpki THE Public Certification Service FOR IndividualsJpki THE Public Certification Service FOR Individuals FOR Windows 7Jpki THE Public Certification Service FOR Individuals FOR Windows Vista | 9/6/2017 | 17/6/2026 | Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)" Ver3.0.1 and earlier and The Public Certification Service… | |
| Analizada | Alta (7.8) | 99% | ⚠ Explotación activa💥 Exploit | Microsoft OfficeMicrosoft Windows 7Microsoft Windows Server 2008Microsoft Windows Server 2012+2 | 12/4/2017 | 17/6/2026 | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution… | |
| Modificada | Media (4.3) | 6.0% | — | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 12/4/2017 | 17/6/2026 | The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or… | |
| Modificada | Alta (8.1) | 6.4% | — | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 12/4/2017 | 17/6/2026 | An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elevation of Privilege… | |
| Modificada | Alta (7.5) | 13% | — | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 12/4/2017 | 17/6/2026 | An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability." | |
| Modificada | Alta (7) | 2.1% | — | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 12/4/2017 | 17/6/2026 | The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Graphics Elevation of Privilege Vulnerability." | |
| Modificada | Media (4.7) | 3.7% | 💥 Exploit | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 12/4/2017 | 17/6/2026 | A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." | |
| Analizada | Alta (7.5) | 100% | ⚠ Explotación activa💥 Exploit | Microsoft Windows 10 1507Microsoft Windows 10 1511Microsoft Windows 10 1607Microsoft Windows 7+14 | 17/3/2017 | 17/6/2026 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 42% | 💥 Exploit | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe Information Disclosure Vulnerability." | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 23% | 💥 Exploit | Microsoft Windows 10Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows RT 8.1+4 | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… | |
| Modificada | Media (4.3) | 22% | 💥 Exploit | Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Vista | 17/3/2017 | 17/6/2026 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,… |