Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2021-34462

Publication date:

16/07/2021

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Severity CVSS v4.0: Pending analysis

Last modification:

28/12/2023

CVE-2021-3452

Publication date:

16/07/2021

A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Severity CVSS v4.0: Pending analysis

Last modification:

27/07/2021

CVE-2021-3550

Publication date:

16/07/2021

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.

Severity CVSS v4.0: Pending analysis

Last modification:

27/07/2021

CVE-2021-34464

Publication date:

16/07/2021

Microsoft Defender Remote Code Execution Vulnerability

Severity CVSS v4.0: Pending analysis

Last modification:

28/12/2023

CVE-2021-34467

Publication date:

16/07/2021

Microsoft SharePoint Server Remote Code Execution Vulnerability

Severity CVSS v4.0: Pending analysis

Last modification:

28/12/2023

CVE-2021-3453

Publication date:

16/07/2021

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Severity CVSS v4.0: Pending analysis

Last modification:

30/07/2021

CVE-2021-3614

Publication date:

16/07/2021

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Severity CVSS v4.0: Pending analysis

Last modification:

30/07/2021

CVE-2021-34481

Publication date:

16/07/2021

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.<br /> UPDATE August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see KB5005652.<br />

Severity CVSS v4.0: Pending analysis

Last modification:

28/12/2023