Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 306 respecto a la semana anterior
Críticas / altas1351▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.4) | 0.18% | — | Jetbrains Pycharm | 17/8/2026 | 10/9/2026 | In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools | |
| Analizada | Media (4.4) | 0.18% | — | Jetbrains Pycharm | 17/8/2026 | 10/9/2026 | In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible | |
| Analizada | Alta (8.6) | 0.18% | — | Jetbrains Pycharm | 23/7/2026 | 3/8/2026 | In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open | |
| Analizada | Media (6.1) | 0.25% | — | Jetbrains Pycharm | 29/5/2026 | 22/7/2026 | In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible | |
| Analizada | Media (6.1) | 0.26% | — | Jetbrains Pycharm | 9/2/2026 | 17/6/2026 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible | |
| Aplazada | Alta (8.8) | 0.34% | — | Anthropic Claude CodeAIMicrosoft VscodeAIJetbrains IntellijAIJetbrains PycharmAI+1 | 24/6/2025 | 17/6/2026 | Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and VSCodium) and JetBrains IDEs (e.g., IntelliJ, Pycharm, and Android Studio) are vulnerable to unauthorized websocket connections from an attacker when visiting attacker-controlled webpages. Claude Code for… | |
| Modificada | Alta (7.5) | 3.8% | — | Jetbrains AquaJetbrains ClionJetbrains DatagripJetbrains Dataspell+9 | 10/6/2024 | 17/6/2026 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell… | |
| Modificada | Alta (7.7) | 0.23% | — | Jetbrains Pycharm | 28/4/2022 | 17/6/2026 | In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible | |
| Modificada | Baja (3.5) | 0.39% | — | Jetbrains Pycharm | 28/4/2022 | 17/6/2026 | In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible | |
| Modificada | Crítica (9.8) | 1.1% | — | Jetbrains ClionJetbrains GolandJetbrains Intellij IdeaJetbrains Phpstorm+3 | 25/2/2022 | 17/6/2026 | JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development… | |
| Modificada | Alta (7.8) | 0.88% | — | Jetbrains Pycharm | 11/5/2021 | 17/6/2026 | In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS. | |
| Modificada | Alta (7.5) | 1.9% | — | Jetbrains Pycharm | 10/4/2020 | 17/6/2026 | In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3. | |
| Modificada | Alta (7.5) | 1.9% | — | Jetbrains Pycharm | 2/10/2019 | 17/6/2026 | JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message because of Uncontrolled Memory Allocation. |