Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2533▼ 405 respecto a la semana anterior
Críticas / altas1319▲ 38 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (6.4) | 0.07% | — | Catonetworks Cato ClientAI | 1/7/2026 | 2/7/2026 | Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a… | |
| Analizada | Media (5.7) | 0.25% | — | Catonetworks Cato Client | 27/4/2025 | 17/6/2026 | An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component. | |
| Analizada | Alta (8.8) | 0.14% | — | Catonetworks Cato Client | 31/7/2024 | 17/6/2026 | Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28. | |
| Analizada | Media (6.5) | 0.23% | — | Catonetworks Cato Client | 31/7/2024 | 17/6/2026 | A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34. | |
| Analizada | Alta (8.8) | 0.27% | — | Catonetworks Cato Client | 31/7/2024 | 17/6/2026 | Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34. | |
| Analizada | Alta (7.8) | 0.24% | — | Catonetworks Cato Client | 31/7/2024 | 17/6/2026 | Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34. | |
| Analizada | Alta (8.8) | 0.80% | — | Catonetworks Cato Client | 31/7/2024 | 17/6/2026 | Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34. | |
| Modificada | Alta (8.1) | 0.63% | — | Catonetworks Cato Client | 3/10/2023 | 17/6/2026 | An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component. |