Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior

Críticas / altas1460▲ 109 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

3552 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-59513	Analizada	Media (5.5)	0.47%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	11/11/2025	17/6/2026	Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.
CVE-2025-59295	Analizada	Alta (8.8)	1.9%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
CVE-2025-59282	Modificada	Alta (7)	0.61%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-59280	Analizada	Baja (3.1)	0.46%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	14/10/2025	17/6/2026	Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
CVE-2025-59278	Analizada	Alta (7.8)	0.27%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	14/10/2025	17/6/2026	Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59277	Analizada	Alta (7.8)	0.38%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	14/10/2025	17/6/2026	Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59275	Analizada	Alta (7.8)	0.27%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	14/10/2025	17/6/2026	Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2025-59242	Analizada	Alta (7.8)	0.41%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-59230	Analizada	Alta (7.8)	2.7%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-59214	Modificada	Media (6.5)	1.8%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59208	Analizada	Alta (7.1)	0.50%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
CVE-2025-59205	Analizada	Alta (7)	0.20%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-59201	Analizada	Alta (7.8)	0.45%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
CVE-2025-59198	Analizada	Media (5)	0.47%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
CVE-2025-59196	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59190	Analizada	Media (5.5)	0.50%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
CVE-2025-59187	Analizada	Alta (7.8)	0.30%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-58739	Analizada	Media (6.5)	0.82%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-58736	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58735	Analizada	Alta (7)	0.48%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58733	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58732	Analizada	Alta (7)	0.48%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58730	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58729	Analizada	Media (6.5)	1.1%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
CVE-2025-58726	Modificada	Alta (7.5)	1.0%	💥 PoC	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.