Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3199▲ 621 respecto a la semana anterior
Críticas / altas1509▲ 117 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)236▲ 222 respecto a la semana anterior
18.402 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.1) | 0.47% | — | Microsoft Dynamics 365 Customer Voice | 9/7/2026 | 9/7/2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (8.2) | 0.51% | — | Microsoft Edge Chromium | 8/7/2026 | 9/7/2026 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |
| Aplazada | Crítica (9.9) | 0.66% | — | Webpros PleskAI | 8/7/2026 | 10/7/2026 | Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This results in cross-tenant… | |
| Aplazada | Media (4.6) | 0.19% | — | Actual-app CLIAIMicrosoft ExcelAILibreoffice CalcAIGoogle SheetsAI | 7/7/2026 | 8/7/2026 | Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format csv option is passed, whose escapeCsv helper only handles RFC 4180 delimiter, quote, and newline escaping and does not neutralize standard… | |
| Analizada | Media (6.5) | 0.88% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Media (4.3) | 0.70% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (6.1) | 0.41% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | La neutralización incorrecta de la entrada durante la generación de páginas web ('secuencias de comandos en sitios cruzados') en Microsoft Edge (Chromium-based) permite a un atacante no autorizado realizar suplantación a través de una red. | |
| Analizada | Media (5.5) | 0.43% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | |
| Analizada | Media (5.5) | 0.45% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | |
| Analizada | Alta (7.5) | 0.47% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.1) | 0.41% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | La neutralización incorrecta de la entrada durante la generación de páginas web ('secuencias de comandos en sitios cruzados') en Microsoft Edge (Chromium-based) permite a un atacante no autorizado realizar suplantación a través de una red. | |
| Analizada | Alta (7.1) | 0.54% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.1) | 0.54% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (8.3) | 0.51% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7.5) | 0.48% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.1) | 0.99% | — | Microsoft Edge Chromium | 3/7/2026 | 6/7/2026 | Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.5) | 0.43% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | El acceso a un recurso usando un tipo incompatible ('confusión de tipos') en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.3) | 2.0% | 💥 Exploit | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | El acceso a un recurso usando un tipo incompatible ('confusión de tipos') en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.3) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.3) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Un uso después de liberar (use-after-free) en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Media (6.9) | 0.42% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (8.3) | 0.61% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | El acceso a un recurso usando un tipo incompatible ('confusión de tipos') en Microsoft Edge (basado en Chromium) permite a un atacante no autorizado ejecutar código a través de una red. | |
| Analizada | Alta (8.3) | 0.56% | — | Microsoft Edge Chromium | 3/7/2026 | 7/7/2026 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |