Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior
Críticas / altas1302▼ 187 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
354 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (1.2) | 0.30% | — | GNU Glibc | 19/12/2000 | 23/9/2026 | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack. | |
| Modificada | Alta (7.2) | 1.2% | 💥 Exploit | GNU Glibc | 14/11/2000 | 16/6/2026 | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH. | |
| Modificada | Alta (7.5) | 1.6% | — | GNU GlibcISC Bind | 3/5/2000 | 16/6/2026 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. | |
| Modificada | Alta (7.5) | 9.1% | 💥 Exploit | GNU LibcCray UnicosCray Unicos MAXIBM AIX+2 | 13/2/1997 | 16/6/2026 | Buffer overflow in NLS (Natural Language Service). |