Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

1652 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-54115	Modificada	Alta (7)	0.42%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+6	9/9/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-54114	Modificada	Alta (7)	0.29%	—	Microsoft Windows 10 1607 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+6	9/9/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54112	Analizada	Alta (7)	0.38%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+9	9/9/2025	17/6/2026	Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
CVE-2025-54111	Analizada	Alta (7.8)	0.38%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+9	9/9/2025	17/6/2026	Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.
CVE-2025-54110	Analizada	Alta (8.8)	4.2%	💥 PoC	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-54109	Analizada	Media (6.7)	0.47%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54107	Analizada	Media (4.3)	0.92%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-54104	Analizada	Media (6.7)	0.50%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54103	Analizada	Alta (7.4)	0.41%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2 Microsoft Windows 11 23h2+3	9/9/2025	17/6/2026	Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.
CVE-2025-54102	Analizada	Alta (7.8)	0.46%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/9/2025	17/6/2026	Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54101	Modificada	Media (4.8)	2.6%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+8	9/9/2025	17/6/2026	Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
CVE-2025-54099	Analizada	Alta (7)	0.38%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-54098	Analizada	Alta (7.8)	2.8%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-54094	Analizada	Media (6.7)	0.47%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54093	Analizada	Alta (7)	0.39%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2025-54092	Analizada	Alta (7.8)	0.34%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+6	9/9/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-54091	Analizada	Alta (7.8)	0.46%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	9/9/2025	17/6/2026	Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53810	Analizada	Media (6.7)	0.47%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53808	Analizada	Media (6.7)	0.47%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	9/9/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53807	Analizada	Alta (7)	0.29%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+6	9/9/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-53805	Analizada	Alta (7.5)	1.4%	—	Microsoft Windows 11 22h2 Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows Server 2022+2	9/9/2025	17/6/2026	Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2025-53804	Analizada	Media (5.5)	0.66%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	9/9/2025	17/6/2026	Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53803	Analizada	Media (5.5)	0.66%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	9/9/2025	17/6/2026	Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53802	Analizada	Alta (7)	0.38%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2 Microsoft Windows 11 23h2+4	9/9/2025	17/6/2026	Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53801	Analizada	Alta (7.8)	0.46%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+7	9/9/2025	17/6/2026	Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.