Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-28582

Publication date:

04/03/2024

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Severity CVSS v4.0: Pending analysis

Last modification:

10/01/2025

CVE-2023-33066

Publication date:

04/03/2024

Memory corruption in Audio while processing RT proxy port register driver.

Severity CVSS v4.0: Pending analysis

Last modification:

11/08/2025

CVE-2023-33078

Publication date:

04/03/2024

Information Disclosure while processing IOCTL request in FastRPC.

Severity CVSS v4.0: Pending analysis

Last modification:

10/01/2025

CVE-2023-28578

Publication date:

04/03/2024

Memory corruption in Core Services while executing the command for removing a single event listener.

Severity CVSS v4.0: Pending analysis

Last modification:

11/08/2025

CVE-2023-6143

Publication date:

04/03/2024

Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user and the system is under heavy load, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r1p0 through r18p0; Valhall GPU Kernel Driver: from r37p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.

Severity CVSS v4.0: Pending analysis

Last modification:

27/03/2025

CVE-2023-4479

Publication date:

04/03/2024

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.

Severity CVSS v4.0: Pending analysis

Last modification:

23/02/2026

CVE-2024-26622

Publication date:

04/03/2024

In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->io_sem is held. Otherwise, concurrent write() requests can cause use-after-free-write and double-free problems.

Severity CVSS v4.0: Pending analysis

Last modification:

04/11/2025