Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2806▲ 5 respecto a la semana anterior

Críticas / altas1465▲ 246 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)77▼ 441 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-41031	Aplazada	Crítica (9.3)	0.42%	—	Sysinternals Process Monitor^AI	9/6/2026	23/7/2026	A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.
CVE-2023-42757	Aplazada	Media (4.2)	0.27%	—	Sysinternals Process Explorer^AI	7/5/2024	17/6/2026	Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscat_s error handling.
CVE-2023-29353	Modificada	Media (5.5)	0.77%	—	Microsoft Sysinternals Microsoft Sysinternals Process Monitor	14/6/2023	17/6/2026	Sysinternals Process Monitor for Windows Denial of Service Vulnerability
CVE-2007-4223	Modificada	Alta (10)	7.4%	—	Microsoft Sysinternals Debugview	8/11/2007	16/6/2026	Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors.
CVE-2007-4969	Modificada	Media (4.4)	0.28%	—	Sysinternals Process Monitor	19/9/2007	16/6/2026	Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2)…
CVE-2007-4972	Modificada	Baja (1.9)	0.28%	—	Sysinternals Regmon	19/9/2007	16/6/2026	RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.
CVE-2005-2679	Modificada	Alta (10)	3.5%	—	Sysinternals Process Explorer	23/8/2005	16/6/2026	Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
CVE-2004-2730	Modificada	Media (4.6)	1.5%	—	Microsoft Psexec Microsoft Psgetsid Microsoft Psinfo Microsoft Pskill+7	31/12/2004	16/6/2026	Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not…
CVE-2004-1748	Modificada	Baja (2.1)	0.85%	—	Sysinternals Regmon	31/12/2004	16/6/2026	NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.