Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 237 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-1636	Analizada	Media (5.4)	0.13%	—	Lenovo Service Bridge	15/4/2026	24/8/2026	A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated privileges.
CVE-2024-4696	Aplazada	Alta (7.5)	0.44%	—	Lenovo Service Bridge^AI	13/6/2024	17/6/2026	A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.
CVE-2023-38691	Modificada	Media (6.5)	0.47%	—	Matrix-appservice-bridge	4/8/2023	17/6/2026	matrix-appservice-bridge provides an API for setting up bridges. Starting in version 4.0.0 and prior to versions 8.1.2 and 9.0.1, a malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the provisioning API. The library does not check that the…
CVE-2021-32659	Modificada	Media (4.9)	0.94%	—	Matrix-appservice-bridge	16/6/2021	17/6/2026	Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the configuration (the `roomUpgradeOpts` key when instantiating a new `Bridge` instance.), any `m.room.tombstone` event it…
CVE-2019-6169	Modificada	Alta (7.5)	0.76%	—	Lenovo Service Bridge	26/6/2019	17/6/2026	A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
CVE-2019-6168	Modificada	Crítica (9.8)	2.5%	—	Lenovo Service Bridge	26/6/2019	17/6/2026	A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6167	Modificada	Crítica (9.8)	2.5%	—	Lenovo Service Bridge	26/6/2019	17/6/2026	A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6166	Modificada	Alta (8.8)	0.48%	—	Lenovo Service Bridge	26/6/2019	17/6/2026	A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
CVE-2016-8231	Modificada	Alta (7.5)	0.51%	—	Lenovo Service Bridge	4/6/2017	17/6/2026	In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate.
CVE-2016-8230	Modificada	Alta (7.5)	1.1%	—	Lenovo Service Bridge	4/6/2017	17/6/2026	In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.
CVE-2016-8229	Modificada	Alta (8.8)	0.45%	—	Lenovo Service Bridge	4/6/2017	17/6/2026	A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.
CVE-2016-8228	Modificada	Alta (7.8)	0.37%	—	Lenovo Service Bridge	4/6/2017	17/6/2026	In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.