Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
1230 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.8) | 14% | ⚠ Explotación activa💥 PoC | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.5) | 2.5% | 💥 PoC | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (7.1) | 4.2% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 8/4/2025 | 17/6/2026 | Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally. | |
| Analizada | Media (5.5) | 0.86% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally. | |
| Analizada | Alta (7.8) | 0.80% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2008+3 | 8/4/2025 | 17/6/2026 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | |
| Analizada | Media (6.5) | 3.4% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+10 | 8/4/2025 | 17/6/2026 | Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network. | |
| Analizada | Alta (8.6) | 0.76% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally. | |
| Analizada | Media (6) | 0.40% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 8/4/2025 | 17/6/2026 | Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. | |
| Analizada | Alta (7.8) | 0.73% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2008+3 | 8/4/2025 | 17/6/2026 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | |
| Analizada | Alta (7) | 0.34% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.98% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.1) | 1.5% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 8/4/2025 | 17/6/2026 | Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (8) | 1.5% | — | Microsoft Remote Desktop ClientMicrosoft Windows APPMicrosoft Windows 10 1507Microsoft Windows 10 1607+13 | 8/4/2025 | 17/6/2026 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7.5) | 0.80% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (7.8) | 0.76% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012+2 | 8/4/2025 | 17/6/2026 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 1.2% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7) | 0.45% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 1.5% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7.5) | 2.2% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. | |
| Analizada | Media (5.4) | 1.6% | — | Microsoft Windows 10 1507Microsoft Windows Server 2012 | 8/4/2025 | 17/6/2026 | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Media (5.9) | 1.3% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network. | |
| Analizada | Alta (7.5) | 2.5% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. | |
| Analizada | Alta (7.8) | 0.57% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+10 | 8/4/2025 | 17/6/2026 | Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.5) | 1.1% | — | Microsoft 365 CopilotMicrosoft OfficeMicrosoft Windows 10 1507Microsoft Windows 10 1607+13 | 8/4/2025 | 17/6/2026 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | |
| Analizada | Alta (7.5) | 1.5% | 💥 PoC | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 8/4/2025 | 17/6/2026 | Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |