Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2666▼ 407 respecto a la semana anterior
Críticas / altas1266▼ 215 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)215▼ 115 respecto a la semana anterior
1676 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.7) | 0.49% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code locally. | |
| Analizada | Media (6.5) | 1.2% | — | Microsoft Windows Server 2008Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019+3 | 9/9/2025 | 17/6/2026 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.8) | 0.33% | — | Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2Microsoft Windows 11 22h2+6 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally. | |
| Analizada | Alta (7) | 0.30% | — | Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2Microsoft Windows 11 22h2+6 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.5) | 0.39% | — | Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2Microsoft Windows 11 22h2+6 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally. | |
| Analizada | Alta (8.8) | 20% | 💥 PoC | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Media (4.3) | 0.90% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Alta (7.8) | 2.3% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | |
| Analizada | Media (6.7) | 0.48% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.30% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.50% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.3) | 0.66% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.29% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.46% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.3) | 0.54% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 9/9/2025 | 17/6/2026 | Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally. | |
| Modificada | Alta (7) | 0.42% | — | Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2Microsoft Windows 11 22h2+6 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | |
| Modificada | Alta (7) | 0.29% | — | Microsoft Windows 10 1607Microsoft Windows 10 21h2Microsoft Windows 10 22h2Microsoft Windows 11 22h2+6 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 0.90% | — | Microsoft Windows Server 2008Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019+3 | 9/9/2025 | 17/6/2026 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7) | 0.38% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 9/9/2025 | 17/6/2026 | Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.38% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+9 | 9/9/2025 | 17/6/2026 | Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 4.2% | 💥 PoC | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| Analizada | Media (6.7) | 0.47% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. | |
| Analizada | Media (4.3) | 0.92% | — | Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2+11 | 9/9/2025 | 17/6/2026 | Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Alta (8.8) | 1.4% | — | Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022+2 | 9/9/2025 | 17/6/2026 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7) | 0.29% | — | Microsoft Windows 11 24h2Microsoft Windows Server 2022 23h2Microsoft Windows Server 2025 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |