Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior
Críticas / altas1285▼ 65 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior
309 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.8) | 0.26% | — | Microsoft Edge Chromium | 18/9/2026 | 24/9/2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 15/9/2026 | 25/9/2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 15/9/2026 | 25/9/2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (7.8) | 0.20% | — | Microsoft Edge Chromium | 14/9/2026 | 25/9/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. | |
| Analizada | Media (6.1) | 0.41% | — | Microsoft Edge Chromium | 11/9/2026 | 25/9/2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (8.8) | 0.66% | — | Microsoft EdgeMicrosoft Edge Chromium | 11/9/2026 | 6/10/2026 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (8.8) | 0.82% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (5.4) | 0.41% | — | Microsoft EdgeMicrosoft Edge Chromium | 28/8/2026 | 1/9/2026 | Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (5.4) | 0.21% | — | Microsoft Edge Chromium | 28/8/2026 | 31/8/2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Media (4.3) | 0.79% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.5) | 0.92% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (5.4) | 0.41% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (5.4) | 0.39% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Baja (3) | 0.29% | — | Microsoft Edge Chromium | 28/8/2026 | 11/9/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network. | |
| Analizada | Alta (8.3) | 0.73% | — | Microsoft Edge Chromium | 14/8/2026 | 18/8/2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (5.4) | 0.41% | — | Microsoft Edge Chromium | 11/8/2026 | 17/8/2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (8.8) | 0.77% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (6.1) | 0.39% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Media (5.4) | 0.23% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Crítica (9.6) | 1.1% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Alta (8.1) | 0.36% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Media (5.4) | 0.21% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. | |
| Analizada | Media (5.4) | 0.21% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| Analizada | Media (5.3) | 0.57% | — | Microsoft Edge Chromium | 4/8/2026 | 6/8/2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |