Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2677▼ 656 respecto a la semana anterior
Críticas / altas1264▼ 294 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
1895 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 28% | — | Microsoft Internet Explorer | 13/1/2016 | 17/6/2026 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability." | |
| Analizada | Crítica (9.8) | 98% | ⚠ Explotación activa💥 Exploit | IBM Sterling B2B IntegratorIBM Sterling IntegratorIBM Tivoli Common ReportingIBM Watson Content Analytics+3 | 2/1/2016 | 17/6/2026 | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library. | |
| Modificada | Media (6.8) | 12% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protection mechanism, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, aka "Internet Explorer XSS Filter Bypass Vulnerability." | |
| Modificada | Alta (9.3) | 13% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6152. | |
| Modificada | Media (4.3) | 19% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass." | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158,… | |
| Modificada | Alta (9.3) | 19% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153,… | |
| Modificada | Alta (9.3) | 17% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153,… | |
| Modificada | Media (4.3) | 16% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." | |
| Modificada | Alta (9.3) | 13% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6148. | |
| Modificada | Alta (9.3) | 17% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." | |
| Modificada | Alta (9.3) | 17% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6150. | |
| Modificada | Alta (9.3) | 17% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6158,… | |
| Modificada | Alta (9.3) | 34% | 💥 Exploit | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162. | |
| Modificada | Alta (9.3) | 19% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6083. | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6154. | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6147. | |
| Modificada | Alta (9.3) | 19% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6156. | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6149. | |
| Modificada | Alta (9.3) | 13% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6145. | |
| Modificada | Alta (9.3) | 13% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6146. | |
| Modificada | Media (4.3) | 13% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Browser XSS Filter Bypass Vulnerability." | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159,… | |
| Modificada | Alta (9.3) | 20% | — | Microsoft EdgeMicrosoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158,… | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Internet Explorer | 9/12/2015 | 17/6/2026 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6134. |