Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2744▼ 71 respecto a la semana anterior

Críticas / altas1416▲ 184 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-24915	Analizada	Alta (7.2)	0.21%	—	Checkpoint Smartconsole	29/6/2025	17/6/2026	Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
CVE-2024-24916	Analizada	Alta (7.8)	2.7%	—	Checkpoint Smartconsole	19/6/2025	17/6/2026	Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).
CVE-2020-6024	Modificada	Alta (7.8)	0.27%	—	Checkpoint Smartconsole	20/1/2021	17/6/2026	Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.
CVE-2019-8459	Modificada	Crítica (9.8)	1.2%	—	Checkpoint Jumbo Hotfix FOR Endpoint Security Server Checkpoint Endpoint Security Server Package Checkpoint Smartconsole FOR Endpoint Security Server Checkpoint Endpoint Security Clients+2	20/6/2019	17/6/2026	Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.