Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2025-53721 2025-08-12 HIGH 7.0 Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53720 2025-08-12 HIGH 8.0 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-53719 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-53718 2025-08-12 HIGH 7.0 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53716 2025-08-12 MEDIUM 6.5 Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2025-53156 2025-08-12 MEDIUM 5.5 Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally.
CVE-2025-53155 2025-08-12 HIGH 7.8 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53154 2025-08-12 HIGH 7.8 Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53153 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-53152 2025-08-12 HIGH 7.8 Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
CVE-2025-53151 2025-08-12 HIGH 7.8 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-53149 2025-08-12 HIGH 7.8 Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-53148 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-53147 2025-08-12 HIGH 7.0 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53145 2025-08-12 HIGH 8.8 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53144 2025-08-12 HIGH 8.8 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53143 2025-08-12 HIGH 8.8 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVE-2025-53142 2025-08-12 HIGH 7.0 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-53141 2025-08-12 HIGH 7.8 Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53140 2025-08-12 HIGH 7.0 Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-53138 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-53137 2025-08-12 HIGH 7.0 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53136 2025-08-12 MEDIUM 5.5 Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53135 2025-08-12 HIGH 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2025-53134 2025-08-12 HIGH 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53133 2025-08-12 HIGH 7.8 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-53132 2025-08-12 HIGH 8.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges over a network.
CVE-2025-53131 2025-08-12 HIGH 8.8 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2025-50177 2025-08-12 HIGH 8.1 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2025-50176 2025-08-12 HIGH 7.8 Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2025-50173 2025-08-12 HIGH 7.8 Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-50172 2025-08-12 MEDIUM 6.5 Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network.
CVE-2025-50171 2025-08-12 CRITICAL 9.1 Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-50170 2025-08-12 HIGH 7.8 Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-50169 2025-08-12 HIGH 7.5 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute code over a network.
CVE-2025-50168 2025-08-12 HIGH 7.8 Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-50167 2025-08-12 HIGH 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-50166 2025-08-12 MEDIUM 6.5 Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.
CVE-2025-50165 2025-08-12 CRITICAL 9.8 Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-50164 2025-08-12 HIGH 8.0 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-50163 2025-08-12 HIGH 8.8 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-50162 2025-08-12 HIGH 8.0 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-50161 2025-08-12 HIGH 7.3 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-50160 2025-08-12 HIGH 8.0 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-50159 2025-08-12 HIGH 7.3 Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
CVE-2025-50158 2025-08-12 HIGH 7.0 Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVE-2025-50157 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-50156 2025-08-12 MEDIUM 5.7 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVE-2025-50155 2025-08-12 HIGH 7.8 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2025-50154 2025-08-12 HIGH 7.5 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
« Anterior Página 925 de 4305 Siguiente »