Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior
Críticas / altas1298▼ 212 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
–

309 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.1)8.1%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
ModificadaCrítica (9.6)7.9%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
ModificadaMedia (6.5)11%💥 PoCGoogle ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
ModificadaAlta (8.8)7.0%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
ModificadaCrítica (9.6)6.2%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
ModificadaAlta (8.8)6.9%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
ModificadaAlta (8.8)6.8%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
ModificadaAlta (8.8)17%—Google ChromeMicrosoft Edge Chromium9/2/202117/6/2026
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
AnalizadaAlta (8.8)48%⚠ Explotación activaCefsharpGoogle ChromeMicrosoft EdgeMicrosoft Edge Chromium+43/11/202017/6/2026
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.