Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 82 respecto a la semana anterior
Críticas / altas1416▲ 189 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)100▼ 400 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.7) | 0.30% | — | Ribose RNPAI | 21/11/2025 | 17/6/2026 | In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release can be decrypted… | |
| Modificada | Alta (7.5) | 0.41% | — | Ribose RNP | 24/4/2023 | 17/6/2026 | Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use. | |
| Modificada | Media (5.3) | 0.90% | — | Ribose RNP | 24/4/2023 | 17/6/2026 | Ribose RNP before 0.16.3 may hang when the input is malformed. | |
| Modificada | Alta (7.5) | 0.49% | — | Ribose RNP | 21/4/2023 | 17/6/2026 | Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm. |