Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 68 respecto a la semana anterior

Críticas / altas1421▲ 55 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

28 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-38396	Modificada	Alta (7.8)	0.41%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1511 Microsoft Windows 10 1607 Microsoft Windows 10 1703+6	12/2/2023	17/6/2026	HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.
CVE-2021-43226	Analizada	Alta (7.8)	3.1%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+15	15/12/2021	22/8/2026	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-41379	Analizada	Alta (7.8)	19%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+14	10/11/2021	19/8/2026	Windows Installer Elevation of Privilege Vulnerability
CVE-2021-41357	Analizada	Alta (7.8)	1.6%	⚠ Explotación activa	Microsoft Windows 10 2004 Microsoft Windows 10 20h2 Microsoft Windows 10 21h1 Microsoft Windows 11 21h2+3	13/10/2021	17/6/2026	Win32k Elevation of Privilege Vulnerability
CVE-2021-40450	Analizada	Alta (7.8)	1.6%	⚠ Explotación activa	Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2+6	13/10/2021	17/6/2026	Win32k Elevation of Privilege Vulnerability
CVE-2021-40449	Analizada	Alta (7.8)	74%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+15	13/10/2021	17/6/2026	Win32k Elevation of Privilege Vulnerability
CVE-2021-40444	Analizada	Alta (7.8)	97%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+13	15/9/2021	10/8/2026	Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used…
CVE-2021-36955	Analizada	Alta (7.8)	4.1%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+13	15/9/2021	10/8/2026	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-36948	Analizada	Alta (7.8)	23%	⚠ Explotación activa	Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2+4	12/8/2021	10/8/2026	Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-34486	Analizada	Alta (7.8)	9.3%	⚠ Explotación activa	Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2+4	12/8/2021	10/8/2026	Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-34484	Analizada	Alta (7.8)	22%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+12	12/8/2021	10/8/2026	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-36934	Analizada	Alta (7.8)	67%	⚠ Explotación activa	Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2+1	22/7/2021	10/8/2026	An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then…
CVE-2021-34448	Analizada	Alta (8.8)	40%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+10	16/7/2021	10/8/2026	Scripting Engine Memory Corruption Vulnerability
CVE-2021-33771	Analizada	Alta (7.8)	10%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+10	14/7/2021	10/8/2026	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979	Analizada	Alta (7.8)	4.5%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+12	14/7/2021	10/8/2026	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-33742	Analizada	Alta (8.8)	59%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+10	8/6/2021	17/6/2026	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-33739	Analizada	Alta (7.8)	6.6%	⚠ Explotación activa	Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2 Microsoft Windows 10 21h1+2	8/6/2021	17/6/2026	Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-31956	Analizada	Alta (7.8)	22%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+12	8/6/2021	17/6/2026	Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31955	Analizada	Media (5.5)	81%	⚠ Explotación activa	Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2+4	8/6/2021	17/6/2026	Windows Kernel Information Disclosure Vulnerability
CVE-2021-31201	Analizada	Alta (7.8)	2.6%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+12	8/6/2021	17/6/2026	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199	Analizada	Alta (7.8)	3.0%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+12	8/6/2021	17/6/2026	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-1675	Analizada	Alta (7.8)	85%	⚠ Explotación activa	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 1909+11	8/6/2021	12/8/2026	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-31166	Analizada	Crítica (9.8)	100%	⚠ Explotación activa	Microsoft Windows 10 2004 Microsoft Windows 10 20h2 Microsoft Windows Server 2004 Microsoft Windows Server 20h2	11/5/2021	17/6/2026	HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-28310	Analizada	Alta (7.8)	8.3%	⚠ Explotación activa	Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004+5	13/4/2021	17/6/2026	Win32k Elevation of Privilege Vulnerability
CVE-2021-1732	Analizada	Alta (7.8)	78%	⚠ Explotación activa	Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004+5	25/2/2021	12/8/2026	Windows Win32k Elevation of Privilege Vulnerability