Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior
Críticas / altas1305▼ 185 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
–

3552 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (8.1)1.1%💥 PoCMicrosoft Windows Server 2008Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019+310/6/202517/6/2026
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (7.8)2.2%⚠ Explotación activa💥 PoCMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
AnalizadaAlta (7.8)0.53%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2008+313/5/202517/6/2026
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
AnalizadaAlta (7.8)2.3%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AnalizadaAlta (7.8)1.4%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AnalizadaAlta (7.5)27%⚠ Explotación activa💥 ExploitMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (7.8)4.2%—Microsoft 365 CopilotMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Windows 10 1507+1413/5/202517/6/2026
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
AnalizadaAlta (7.8)0.51%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2+1013/5/202517/6/2026
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AnalizadaMedia (5.7)0.69%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
AnalizadaAlta (7.5)1.2%💥 PoCMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
AnalizadaMedia (6.5)1.9%—Microsoft Windows Server 2008Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019+213/5/202517/6/2026
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.
AnalizadaAlta (8.8)1.3%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (8.8)1.4%—Microsoft Remote DesktopMicrosoft Windows APPMicrosoft Windows 10 1507Microsoft Windows 10 1607+1313/5/202517/6/2026
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (8.8)14%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (6.5)1.3%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.5)1.4%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.5)1.4%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.5)1.3%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.2)0.58%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.
AnalizadaMedia (5.4)1.0%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
AnalizadaMedia (5.9)1.4%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+913/5/202517/6/2026
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
AnalizadaMedia (4)0.49%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
AnalizadaMedia (5.5)0.66%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
AnalizadaMedia (6.5)1.3%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.5)1.3%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+1113/5/202517/6/2026
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Orbitaley — Vulnerabilidades