Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior

Críticas / altas1460▲ 109 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

1532 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-83967	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83952	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83942	Analizada	Alta (7.8)	0.30%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	10/9/2026	Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83940	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83939	Analizada	Alta (8.2)	0.35%	—	Microsoft Windows 11 26h1	8/9/2026	10/9/2026	Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-83501	Analizada	Media (5.5)	0.40%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	10/9/2026	Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-83498	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	10/9/2026	Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81963	Analizada	Alta (7.8)	0.39%	⚠ Explotación activa	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	9/9/2026	Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-81354	Analizada	Alta (8.2)	0.35%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+4	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80093	Analizada	Alta (7)	0.32%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	10/9/2026	Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80083	Analizada	Alta (8.8)	0.33%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+2	8/9/2026	10/9/2026	Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-78464	Analizada	Alta (7)	0.20%	—	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1	8/9/2026	10/9/2026	Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-78457	Analizada	Alta (7)	0.26%	—	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2022+1	8/9/2026	11/9/2026	Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78455	Analizada	Media (4.3)	0.52%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+6	8/9/2026	11/9/2026	Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78454	Analizada	Media (5.5)	0.40%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+6	8/9/2026	11/9/2026	Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-78452	Analizada	Media (4.6)	0.47%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	11/9/2026	Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78451	Analizada	Media (6.8)	0.44%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	11/9/2026	Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-78448	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78447	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	9/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77899	Analizada	Alta (7)	0.26%	—	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2012	8/9/2026	16/9/2026	Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77500	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+6	8/9/2026	16/9/2026	Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77489	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73026	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.