Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.5)0.32%—Linux KernelDebian LinuxNetapp A700s FirmwareNetapp Active IQ Unified Manager+2027/7/202217/6/2026
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
ModificadaAlta (7.3)95%—OpensslDebian LinuxFedoraproject FedoraSiemens Sinec INS+2421/6/202217/6/2026
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in…
ModificadaMedia (6.7)0.40%—Linux KernelNetapp Cloud BackupNetapp SolidfireNetapp Steelstore Cloud Integrated Storage+148/4/202017/6/2026
In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.
ModificadaAlta (7.8)2.1%—Linux KernelDebian LinuxCanonical Ubuntu LinuxNetapp Active IQ Unified Manager+148/12/201917/6/2026
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right…