Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
–

83 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.3)9.8%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+931/5/202317/6/2026
Windows Print Spooler Elevation of Privilege Vulnerability
ModificadaMedia (6.7)0.41%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h1+1031/5/202317/6/2026
Unified Write Filter Elevation of Privilege Vulnerability
ModificadaAlta (8.1)1.2%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1131/5/202317/6/2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
ModificadaAlta (8.1)1.2%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1131/5/202317/6/2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
ModificadaAlta (7.8)6.5%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1131/5/202317/6/2026
Win32k Elevation of Privilege Vulnerability
ModificadaAlta (7.8)0.55%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+931/5/202317/6/2026
Windows Digital Media Receiver Elevation of Privilege Vulnerability
ModificadaMedia (5.9)1.7%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1231/5/202317/6/2026
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
ModificadaAlta (7.8)0.55%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1031/5/202317/6/2026
Windows Digital Media Receiver Elevation of Privilege Vulnerability
ModificadaAlta (8.1)1.2%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1131/5/202317/6/2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
ModificadaCrítica (9.8)2.0%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1131/5/202317/6/2026
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
ModificadaAlta (7.8)1.5%—Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1231/5/202317/6/2026
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
ModificadaAlta (8.1)0.99%—Microsoft Windows 10Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1127/4/202317/6/2026
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
AnalizadaMedia (5.4)76%⚠ Explotación activaMicrosoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2Microsoft Windows 10 21h1+613/12/202217/6/2026
Windows SmartScreen Security Feature Bypass Vulnerability
ModificadaAlta (7.8)0.51%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2Microsoft Windows 10 21h1+1113/12/202217/6/2026
Windows Hyper-V Elevation of Privilege Vulnerability
AnalizadaAlta (8.8)25%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+129/11/202210/8/2026
Windows Scripting Languages Remote Code Execution Vulnerability
AnalizadaAlta (7.8)3.0%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+109/11/202210/8/2026
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
AnalizadaMedia (5.4)1.8%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+89/11/202210/8/2026
Windows Mark of the Web Security Feature Bypass Vulnerability
AnalizadaAlta (7.8)2.3%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+129/11/202210/8/2026
Windows Print Spooler Elevation of Privilege Vulnerability
AnalizadaMedia (5.4)2.5%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+89/11/202210/8/2026
Windows Mark of the Web Security Feature Bypass Vulnerability
AnalizadaAlta (7.8)1.7%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1211/10/202217/6/2026
Windows COM+ Event System Service Elevation of Privilege Vulnerability
AnalizadaAlta (7.8)15%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+911/10/202217/6/2026
Windows Print Spooler Elevation of Privilege Vulnerability
AnalizadaAlta (7.8)28%⚠ Explotación activa💥 PoCMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1113/9/202210/9/2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
AnalizadaAlta (7.8)68%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+129/8/202217/6/2026
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
AnalizadaAlta (7.8)19%⚠ Explotación activaMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+1212/7/202217/6/2026
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
AnalizadaAlta (7.8)99%⚠ Explotación activa💥 ExploitMicrosoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20h2+121/6/20226/8/2026
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or…
Orbitaley — Vulnerabilidades