Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
–

320 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (7.8)0.26%—Microsoft Edge Chromium18/9/202624/9/2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
AnalizadaAlta (8.8)0.82%—Microsoft Edge Chromium15/9/202625/9/2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
AnalizadaAlta (8.8)0.82%—Microsoft Edge Chromium15/9/202625/9/2026
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (7.8)0.20%—Microsoft Edge Chromium14/9/202625/9/2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
AnalizadaMedia (6.1)0.41%—Microsoft Edge Chromium11/9/202625/9/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaAlta (8.8)0.82%—Microsoft Edge Chromium28/8/202611/9/2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (5.4)0.41%—Microsoft EdgeMicrosoft Edge Chromium28/8/20261/9/2026
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.21%—Microsoft Edge Chromium28/8/202631/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
AnalizadaMedia (4.3)0.79%—Microsoft Edge Chromium28/8/202611/9/2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (6.5)0.92%—Microsoft Edge Chromium28/8/202611/9/2026
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.41%—Microsoft Edge Chromium28/8/202611/9/2026
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (5.4)0.39%—Microsoft Edge Chromium28/8/202611/9/2026
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
AnalizadaBaja (3)0.29%—Microsoft Edge Chromium28/8/202611/9/2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
AnalizadaAlta (8.3)0.73%—Microsoft Edge Chromium14/8/202618/8/2026
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (5.4)0.41%—Microsoft Edge Chromium11/8/202617/8/2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (8.8)0.77%—Microsoft Edge Chromium4/8/20266/8/2026
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (6.1)0.39%—Microsoft Edge Chromium4/8/20266/8/2026
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.23%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaCrítica (9.6)1.1%—Microsoft Edge Chromium4/8/20266/8/2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaAlta (8.1)0.36%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (5.4)0.21%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
AnalizadaMedia (5.4)0.21%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
AnalizadaAlta (7.5)0.61%—Microsoft Edge Chromium4/8/20266/8/2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (5.3)0.57%—Microsoft Edge Chromium4/8/20266/8/2026
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
AnalizadaMedia (6.8)0.23%—Microsoft Edge Chromium4/8/20266/8/2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.