Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3063▲ 557 respecto a la semana anterior
Críticas / altas1459▲ 279 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior
–

202 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (7.8)0.36%—Microsoft Visual Studio 2022Microsoft Visual Studio 2026Microsoft .net FrameworkMicrosoft .net11/8/202617/8/2026
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
AnalizadaAlta (7.8)0.40%—Microsoft .net Framework11/8/202614/8/2026
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
AnalizadaAlta (7)0.37%—Microsoft .net FrameworkMicrosoft Visual Studio 2022Microsoft Visual Studio 2026Microsoft .net11/8/202614/8/2026
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
AnalizadaAlta (8.8)0.78%—Microsoft .net Framework11/8/202614/8/2026
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
AnalizadaMedia (6.5)0.74%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
AnalizadaAlta (7.8)0.46%—Microsoft .net FrameworkMicrosoft .net14/7/202624/7/2026
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
AnalizadaAlta (7.8)4.0%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 202614/7/202624/7/2026
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
AnalizadaAlta (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.8)4.0%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
AnalizadaAlta (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
AnalizadaCrítica (9.8)0.29%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2017Microsoft Visual Studio 2019+214/7/202624/7/2026
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
AnalizadaAlta (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 202614/7/202624/7/2026
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2+914/7/202624/7/2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2+914/7/202624/7/2026
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016+414/7/202624/7/2026
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016+414/7/202624/7/2026
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.2%—Microsoft .net FrameworkMicrosoft Azure Active Directory14/7/202624/7/2026
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
AnalizadaAlta (7.5)1.7%—Microsoft .net FrameworkMicrosoft Azure Active Directory14/7/202624/7/2026
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
ModificadaAlta (7.3)0.57%—Microsoft .net FrameworkMicrosoft .net12/5/202615/7/2026
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
ModificadaAlta (7.3)0.57%—Microsoft Visual Studio 2022Microsoft Visual Studio 2026Microsoft .net FrameworkMicrosoft .net12/5/202615/7/2026
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
ModificadaAlta (7.5)2.4%—Microsoft .netMicrosoft .net Framework14/4/202625/7/2026
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
AnalizadaMedia (5.9)0.66%—Microsoft .net Framework14/4/202625/7/2026
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
ModificadaAlta (7.5)1.3%—Microsoft .net Framework14/4/202615/7/2026
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
AnalizadaMedia (5.7)0.72%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 202214/10/202517/6/2026
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.