Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

309 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (6.8)0.23%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
AnalizadaAlta (8.8)1.1%—Microsoft Edge Chromium4/8/20266/8/2026
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
AnalizadaMedia (6.2)0.40%—Microsoft Edge Chromium4/8/20266/8/2026
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
AnalizadaMedia (6.1)0.41%—Microsoft Edge Chromium4/8/20266/8/2026
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaAlta (7.4)0.92%—Microsoft Edge Chromium4/8/20267/8/2026
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
AnalizadaAlta (7.4)0.92%—Microsoft Edge Chromium26/7/20263/8/2026
Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
AnalizadaAlta (7.4)0.43%—Microsoft Edge Chromium26/7/20263/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (5.4)0.21%—Microsoft Edge Chromium26/7/20263/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.39%—Microsoft Edge Chromium17/7/202621/7/2026
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
AnalizadaAlta (8.3)0.61%—Microsoft Edge Chromium12/7/202614/7/2026
Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
AnalizadaAlta (8.3)0.96%—Microsoft Edge Chromium11/7/202614/7/2026
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (8.2)0.51%—Microsoft Edge Chromium8/7/20269/7/2026
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
AnalizadaMedia (6.5)0.88%—Microsoft Edge Chromium3/7/20267/7/2026
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
AnalizadaMedia (4.3)0.70%—Microsoft Edge Chromium3/7/20266/7/2026
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (6.1)0.41%—Microsoft Edge Chromium3/7/20266/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.5)0.43%—Microsoft Edge Chromium3/7/20267/7/2026
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
AnalizadaMedia (5.5)0.45%—Microsoft Edge Chromium3/7/20267/7/2026
Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
AnalizadaAlta (7.5)0.47%—Microsoft Edge Chromium3/7/20267/7/2026
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (6.1)0.41%—Microsoft Edge Chromium3/7/20267/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaAlta (7.1)0.54%—Microsoft Edge Chromium3/7/20267/7/2026
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
AnalizadaAlta (7.1)0.54%—Microsoft Edge Chromium3/7/20267/7/2026
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
AnalizadaAlta (8.3)0.51%—Microsoft Edge Chromium3/7/20267/7/2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
AnalizadaAlta (7.5)0.61%—Microsoft Edge Chromium3/7/20267/7/2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (7.5)0.61%—Microsoft Edge Chromium3/7/20267/7/2026
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (7.5)0.48%—Microsoft Edge Chromium3/7/20267/7/2026
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Orbitaley — Vulnerabilidades