Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2860▼ 165 respecto a la semana anterior

Críticas / altas1382▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-3436	Modificada	Media (5)	1.1%	—	Symantec PGP Desktop Symantec Encryption Desktop	22/8/2014	17/6/2026	Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
CVE-2014-3431	Modificada	Media (4.3)	0.20%	—	Symantec Encryption Desktop Symantec PGP Desktop	21/6/2014	17/6/2026	Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
CVE-2014-1647	Modificada	Baja (2.6)	0.72%	—	Symantec PGP Desktop Symantec Encryption Desktop	23/4/2014	17/6/2026	Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
CVE-2014-1646	Modificada	Baja (2.6)	0.72%	—	Symantec Encryption Desktop Symantec PGP Desktop	23/4/2014	17/6/2026	Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
CVE-2013-1610	Modificada	Media (6.8)	0.30%	—	Symantec Encryption Desktop Symantec PGP Desktop	5/8/2013	16/6/2026	Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
CVE-2012-6533	Modificada	Media (4.4)	0.62%	—	Symantec PGP Desktop Symantec Encryption Desktop	18/2/2013	16/6/2026	Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
CVE-2012-4351	Modificada	Media (6.9)	0.26%	—	Symantec Encryption Desktop Symantec PGP Desktop	18/2/2013	16/6/2026	Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.