Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3206▲ 621 respecto a la semana anterior
Críticas / altas1515▲ 108 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)238▲ 224 respecto a la semana anterior
16.783 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.9) | 0.44% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (6.9) | 0.42% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (5.4) | 0.40% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (7.4) | 0.88% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (7.4) | 1.0% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.1) | 0.76% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.5) | 0.87% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.8) | 0.72% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Crítica (10) | 0.65% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (7.1) | 0.58% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | La neutralización incorrecta de la entrada durante la generación de páginas web ('secuencias de comandos en sitios cruzados') en Microsoft Edge (Chromium-based) permite a un atacante no autorizado realizar suplantación a través de una red. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | El acceso a un recurso usando un tipo incompatible ('confusión de tipos') en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.5) | 0.92% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un desbordamiento de búfer basado en heap en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Media (4.2) | 0.19% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally. | |
| Modificada | Media (6.5) | 0.88% | — | Microsoft Edge Chromium | 3/7/2026 | 12/7/2026 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | |
| Analizada | Media (5.9) | 0.36% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Pendiente de análisis | Media (6.9) | 0.47% | 💥 PoC | Microsoft Azure Blob StorageAI | 3/7/2026 | 6/7/2026 | The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container. | |
| Analizada | Alta (8.8) | 0.78% | — | Microsoft Entra Provisioning Service | 2/7/2026 | 8/7/2026 | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 0.78% | 💥 PoC | Microsoft Exchange Online | 2/7/2026 | 7/7/2026 | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. |