Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2792▲ 39 respecto a la semana anterior

Críticas / altas1284▼ 238 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)246▲ 228 respecto a la semana anterior

3068 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-59187	Analizada	Alta (7.8)	0.30%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-59185	Analizada	Media (6.5)	1.1%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+11	14/10/2025	17/6/2026	External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-58739	Analizada	Media (6.5)	0.82%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-58738	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58736	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58735	Analizada	Alta (7)	0.48%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58734	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58733	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58732	Analizada	Alta (7)	0.48%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58730	Analizada	Alta (7)	0.35%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58729	Analizada	Media (6.5)	1.1%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
CVE-2025-58728	Analizada	Alta (7.8)	0.42%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+6	14/10/2025	17/6/2026	Un uso después de liberar (use-after-free) en Windows Bluetooth Service permite a un atacante autorizado elevar privilegios localmente.
CVE-2025-58727	Analizada	Alta (7)	0.20%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2 Microsoft Windows 11 23h2+4	14/10/2025	17/6/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-58726	Modificada	Alta (7.5)	1.0%	💥 PoC	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-58725	Analizada	Alta (7)	0.25%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
CVE-2025-58722	Analizada	Alta (7.8)	2.3%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	14/10/2025	17/6/2026	Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-58720	Analizada	Alta (7.8)	0.21%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 22h2+7	14/10/2025	17/6/2026	Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2025-58719	Analizada	Media (4.7)	0.40%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	14/10/2025	17/6/2026	Uso después de liberar (use-after-free) en Connected Devices Platform Service (Cdpsvc) permite a un atacante autorizado elevar privilegios localmente.
CVE-2025-58718	Analizada	Alta (8.8)	0.60%	—	Microsoft Remote Desktop Client Microsoft Windows APP Microsoft Windows 10 1507 Microsoft Windows 10 1607+14	14/10/2025	17/6/2026	Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2025-58717	Analizada	Media (4.3)	0.97%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-58716	Analizada	Alta (8.8)	0.40%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	14/10/2025	17/6/2026	Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2025-58715	Analizada	Alta (8.8)	0.40%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+10	14/10/2025	17/6/2026	Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2025-58714	Analizada	Alta (7.8)	0.27%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-55701	Analizada	Alta (7.8)	0.41%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.
CVE-2025-55700	Analizada	Media (4.3)	0.97%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2+12	14/10/2025	17/6/2026	Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.