Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.8) | 0.47% | — | Microsoft Heif Image Extension | 8/9/2026 | 17/9/2026 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. | |
| Analizada | Crítica (9.1) | 1.1% | — | Microsoft Heif Image Extension | 19/6/2026 | 5/10/2026 | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer… | |
| Modificada | Alta (7.8) | 2.3% | — | Microsoft Heif Image Extension | 9/3/2022 | 17/6/2026 | HEIF Image Extensions Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 0.95% | — | Microsoft Heif Image Extension | 11/11/2020 | 17/6/2026 | HEIF Image Extensions Remote Code Execution Vulnerability |