Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 572 respecto a la semana anterior

Críticas / altas1301▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)295▼ 215 respecto a la semana anterior

18.391 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-83978	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	15/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83977	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83976	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83975	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	9/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83973	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83972	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83971	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83970	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	12/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83952	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025	8/9/2026	10/9/2026	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83951	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	8/9/2026	8/9/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	8/9/2026	8/9/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83948	Analizada	Alta (8)	0.59%	—	Microsoft VM Repair	8/9/2026	14/9/2026	Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
CVE-2026-83942	Analizada	Alta (7.8)	0.30%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	10/9/2026	Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83941	Analizada	Alta (8.8)	0.78%	—	Microsoft Entra ID	8/9/2026	16/9/2026	Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-83940	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	10/9/2026	Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83939	Analizada	Alta (8.2)	0.35%	—	Microsoft Windows 11 26h1	8/9/2026	10/9/2026	Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-83501	Analizada	Media (5.5)	0.40%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	10/9/2026	Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-83498	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	10/9/2026	Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81963	Analizada	Alta (7.8)	0.39%	⚠ Explotación activa	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	9/9/2026	Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.