Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

291 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-23558	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
CVE-2020-23557	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
CVE-2020-23556	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
CVE-2020-23555	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
CVE-2020-23554	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
CVE-2020-23553	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
CVE-2020-23552	Modificada	Alta (7.8)	0.33%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
CVE-2020-23551	Modificada	Alta (7.8)	0.34%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
CVE-2020-23550	Modificada	Alta (7.8)	0.34%	—	Irfanview	16/9/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
CVE-2020-23563	Modificada	Media (5.5)	0.33%	—	Irfanview	18/7/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.
CVE-2020-23562	Modificada	Media (5.5)	0.24%	—	Irfanview	18/7/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.
CVE-2020-23561	Modificada	Media (5.5)	0.33%	—	Irfanview	18/7/2022	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.
CVE-2021-46064	Modificada	Alta (7.8)	1.1%	—	Irfanview	23/3/2022	9/7/2026	IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.
CVE-2020-23545	Modificada	Alta (7.8)	1.3%	—	Irfanview	15/12/2021	17/6/2026	IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.
CVE-2020-23567	Modificada	Media (5.5)	0.93%	—	Irfanview	5/11/2021	17/6/2026	Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea"
CVE-2020-23566	Modificada	Media (5.5)	0.81%	—	Irfanview	5/11/2021	17/6/2026	Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8.
CVE-2020-23565	Modificada	Alta (7.8)	1.1%	—	Irfanview	5/11/2021	17/6/2026	Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions_W+0x0000000000032850".
CVE-2020-23549	Modificada	Alta (7.8)	0.97%	—	Irfanview	28/10/2021	17/6/2026	IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branch Selection starting at FORMATS!GetPlugInInfo+0x00000000000047f6".
CVE-2020-23546	Modificada	Alta (7.8)	0.96%	💥 PoC	Irfanview	28/10/2021	9/7/2026	IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981.
CVE-2021-29367	Modificada	Alta (7.8)	0.98%	—	Irfanview	28/9/2021	17/6/2026	A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.
CVE-2021-29366	Modificada	Alta (7.8)	0.98%	—	Irfanview	28/9/2021	17/6/2026	A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29365	Modificada	Media (5.5)	0.66%	—	Irfanview	28/9/2021	17/6/2026	Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS).
CVE-2021-29364	Modificada	Alta (7.8)	1.0%	—	Irfanview	28/9/2021	17/6/2026	A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29363	Modificada	Alta (7.8)	1.0%	—	Irfanview	28/9/2021	17/6/2026	A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74
CVE-2021-29362	Modificada	Alta (7.8)	1.0%	—	Irfanview	28/9/2021	17/6/2026	A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.