Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

1230 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-53726	Analizada	Alta (7.8)	0.45%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2025-53725	Analizada	Alta (7.8)	0.44%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2025-53724	Analizada	Alta (7.8)	0.45%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2025-53723	Analizada	Alta (7.8)	0.46%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53722	Analizada	Alta (7.5)	22%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.
CVE-2025-53718	Analizada	Alta (7)	0.36%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53155	Analizada	Alta (7.8)	0.46%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53154	Analizada	Alta (7.8)	0.44%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53152	Analizada	Alta (7.8)	0.45%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+8	12/8/2025	17/6/2026	Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
CVE-2025-53149	Analizada	Alta (7.8)	0.71%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-53147	Analizada	Alta (7)	0.45%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53145	Analizada	Alta (8.8)	7.6%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53144	Analizada	Alta (8.8)	7.6%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53143	Analizada	Alta (8.8)	8.1%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53141	Analizada	Alta (7.8)	0.44%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53140	Analizada	Alta (7)	0.36%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-53137	Analizada	Alta (7)	0.39%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53136	Analizada	Media (5.5)	0.91%	💥 PoC	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53135	Analizada	Alta (7)	0.27%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2025-53134	Analizada	Alta (7)	0.32%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53132	Modificada	Alta (7.8)	0.42%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-50177	Analizada	Alta (8.1)	4.4%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2025-50173	Analizada	Alta (7.8)	0.50%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-50167	Analizada	Alta (7)	0.36%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	12/8/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-50166	Analizada	Media (6.5)	1.4%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	12/8/2025	17/6/2026	Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.