Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior
Críticas / altas1298▼ 212 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
309 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.1) | 8.1% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. | |
| Modificada | Crítica (9.6) | 7.9% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | |
| Modificada | Media (6.5) | 11% | 💥 PoC | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. | |
| Modificada | Alta (8.8) | 7.0% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | |
| Modificada | Crítica (9.6) | 6.2% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | |
| Modificada | Alta (8.8) | 6.9% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | |
| Modificada | Alta (8.8) | 6.8% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | |
| Modificada | Alta (8.8) | 17% | — | Google ChromeMicrosoft Edge Chromium | 9/2/2021 | 17/6/2026 | Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. | |
| Analizada | Alta (8.8) | 48% | ⚠ Explotación activa | CefsharpGoogle ChromeMicrosoft EdgeMicrosoft Edge Chromium+4 | 3/11/2020 | 17/6/2026 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |