Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 302 respecto a la semana anterior

Críticas / altas1389▼ 21 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

4086 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-73004	Analizada	Media (5.5)	0.30%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2 Microsoft Windows 11 24h2+4	8/9/2026	17/9/2026	Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
CVE-2026-73003	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	17/9/2026	Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73002	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73001	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73000	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72999	Analizada	Media (6.8)	0.44%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	17/9/2026	Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72997	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72996	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72995	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72994	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72993	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72992	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72991	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	14/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72990	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72988	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72980	Analizada	Media (5.5)	0.57%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	17/9/2026	Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
CVE-2026-72963	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	17/9/2026	Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVE-2026-72941	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71337	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2 Microsoft Windows 11 24h2+4	8/9/2026	15/9/2026	Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-71332	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	16/9/2026	Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-70581	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70573	Analizada	Alta (7)	0.28%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70572	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70569	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+2	8/9/2026	16/9/2026	Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69921	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2 Microsoft Windows 11 24h2+4	8/9/2026	16/9/2026	Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.