Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.50% | — | Microsoft Azure Connected Machine Agent | 14/7/2026 | 18/8/2026 | Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network. | |
| Analizada | Alta (7.8) | 0.30% | — | Microsoft Azure Connected Machine Agent | 12/5/2026 | 17/6/2026 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.30% | — | Microsoft ARC Enabled Servers Azure Connected Machine Agent | 10/3/2026 | 17/6/2026 | Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.32% | — | Microsoft Azure Connected Machine Agent | 13/1/2026 | 17/6/2026 | Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.57% | — | Microsoft Azure Connected Machine Agent | 14/10/2025 | 17/6/2026 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7) | 0.56% | — | Microsoft Azure Connected Machine Agent | 14/10/2025 | 17/6/2026 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.37% | — | Microsoft Azure Connected Machine Agent | 9/9/2025 | 17/6/2026 | External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.35% | — | Microsoft Azure Connected Machine Agent | 9/9/2025 | 1/10/2026 | Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.51% | — | Microsoft Azure Connected Machine Agent | 13/8/2024 | 17/6/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.8) | 0.63% | — | Microsoft Azure Connected Machine Agent | 13/8/2024 | 17/6/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.3) | 1.1% | — | Microsoft Azure Connected Machine Agent | 13/2/2024 | 10/8/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.3) | 0.88% | — | Microsoft Azure Connected Machine Agent | 12/12/2023 | 17/6/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |