Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 486 respecto a la semana anterior
Críticas / altas1302▼ 188 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
–

1770 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (6.7)0.16%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039.
AnalizadaAlta (7.8)0.16%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040.
AnalizadaMedia (6.7)0.15%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049.
AnalizadaAlta (7.8)0.15%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051.
ModificadaMedia (5.3)0.12%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112.
AnalizadaAlta (7.8)0.15%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138.
ModificadaMedia (5.3)0.12%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID:…
ModificadaMedia (5.3)0.12%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID:…
AnalizadaMedia (4.2)0.13%—Mediatek Software Development KITOpenwrt4/11/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153.
AnalizadaAlta (7.8)0.15%—Mediatek Software Development KIT4/11/202517/6/2026
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
ModificadaBaja (2.7)0.23%—Wpdeveloper Essential Addons FOR Elementor31/10/202517/6/2026
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.
AplazadaMedia (6.5)0.41%💥 PoCInstantdeveloper Instant Developer FoundationAI23/10/202517/6/2026
A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with affected versions of the framework did not properly sanitize user-controlled input before including it in CSV exports. This issue could lead to code execution on the system where the exported CSV…
AplazadaMedia (6.4)0.25%—Wpdeveloper Essential BlocksAI18/10/202517/6/2026
The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
AplazadaMedia (6.4)0.30%—Wpdeveloper Essential BlocksAI18/10/202517/6/2026
The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the eb_save_ai_generated_image function. This makes it possible for authenticated attackers, with Author-level access and…
AnalizadaMedia (6.5)1.8%—Zoom Meeting Software Development KITZoom RoomsZoom Workplace DesktopZoom Workplace Virtual Desktop Infrastructure15/10/202517/6/2026
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
AnalizadaMedia (5.5)0.14%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475.
AnalizadaAlta (8.8)0.26%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.
AnalizadaAlta (8.8)0.26%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418955; Issue ID: MSV-3570.
AnalizadaAlta (7.8)0.17%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.
AnalizadaAlta (7.8)0.14%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-3728.
AnalizadaAlta (7.8)0.14%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-3731.
AnalizadaAlta (7.8)0.14%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-3902.
AnalizadaAlta (7.8)0.14%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-3904.
AnalizadaAlta (8.8)0.30%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.
ModificadaAlta (8.8)0.31%—Mediatek Software Development KITOpenwrt14/10/202517/6/2026
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422399; Issue ID: MSV-3748.