Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2022-21888

Publication date:
11/01/2022
Windows Modern Execution Server Remote Code Execution Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21889

Publication date:
11/01/2022
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21890

Publication date:
11/01/2022
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21873

Publication date:
11/01/2022
Tile Data Repository Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21874

Publication date:
11/01/2022
Windows Security Center API Remote Code Execution Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21875

Publication date:
11/01/2022
Windows Storage Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21878

Publication date:
11/01/2022
Windows Geolocation Service Remote Code Execution Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21879

Publication date:
11/01/2022
Windows Kernel Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21880

Publication date:
11/01/2022
Windows GDI+ Information Disclosure Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21881

Publication date:
11/01/2022
Windows Kernel Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21884

Publication date:
11/01/2022
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024

CVE-2022-21885

Publication date:
11/01/2022
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2024