CVEs de Referencia — Casos de Estudio 2022–2025
22 CVEs
| CVE ID | Producto | Clase | CVSS | Impacto |
|---|---|---|---|---|
| CVE-2024-27130 | QNAP QTS/QuTS hero | Stack BOF | 8.4 | RCE remoto autenticado |
| CVE-2024-2883 | Chrome ANGLE | Use-After-Free | 9.6 | RCE via WebGL malicioso |
| CVE-2023-4863 | libWebP (Chrome/Firefox) | Heap BOF | 9.6 | 0-day en wild, RCE sin interaccion |
| CVE-2024-26581 | Linux Kernel netfilter | Uninit Memory | 7.8 | KASLR bypass via fuga de memoria |
| CVE-2022-32250 | Linux nf_tables | UAF / Refcount | 7.8 | LPE → root via user namespaces |
| CVE-2024-26218 | Windows Kernel | TOCTOU Race | 7.7 | LPE: user → SYSTEM |
| CVE-2025-11001 | 7-Zip | TOCTOU Symlink | 7.5 | Escritura arbitraria de archivos |
| CVE-2023-4155 | Linux KVM AMD SEV | Double-Fetch | 6.0 | DoS / guest-to-host escape |
| CVE-2024-0012 | Palo Alto PAN-OS | Auth Bypass | 9.8 | Admin sin credenciales via web |
| CVE-2024-21338 | Windows AppLocker | Kernel IOCTL | 7.8 | Rootkit FudModule — DKOM |
| CVE-2024-7971 | Chrome V8 TurboFan | Type Confusion | 9.8 | JIT → sandbox escape |
| CVE-2024-38063 | Windows TCP/IP IPv6 | Int Underflow | 9.8 | RCE remoto sin autenticar (wormable) |
| CVE-2024-47606 | GStreamer | Signed/Unsigned | 9.8 | RCE via MP4 malicioso |
| CVE-2024-27316 | Apache httpd / nghttp2 | Parser / HTTP2 | 7.5 | DoS via CONTINUATION frames ilimitados |
| CVE-2022-31146 | Wasmtime | UAF / WASM GC | 8.1 | RCE / sandbox escape en WASM |
| CVE-2023-52434 | Linux CIFS (SMB) | NULL Deref | 8.0 | Kernel panic via SMB server malicioso |
| CVE-2023-35086 | ASUS Router RT-AX56U | Format String | 9.0 | RCE en httpd via syslog |
| CVE-2024-53108 | Linux AMDGPU Driver | OOB Read Kernel | 5.5 | Info leak — KASLR bypass |
| CVE-2023-32629 | Linux nf_tables | Locking/RCU | 7.8 | LPE → root con UAF primitivo |
| CVE-2024-2887 | Chrome WebAssembly | Type Confusion | 9.8 | RCE en Pwn2Own 2024 |
| CVE-2024-43461 | Windows MSHTML | Int Overflow | 8.8 | 0-day explotado en campanas APT |
| CVE-2024-30078 | Windows Wi-Fi Driver | Driver RCE | 9.8 | RCE sin autenticar via Wi-Fi |
Cobertura por Clase
Stack / Heap BOF
90%
Use-After-Free
85%
Race Conditions
75%
Type Confusion
80%
Integer Bugs
70%
Format Strings
65%
Kernel / Drivers
60%
Logic / Auth Bypass
50%
Dia 7 · Proyecto Final
Capstone: Triaje de Vulnerabilidades
El alumno recibe un set de 5 CVEs no vistos y debe clasificarlos, calcular CVSS, analizar el impacto y redactar un reporte tecnico completo.
- Identificar la clase de vulnerabilidad
- Calcular score CVSS v3.1 manualmente
- Describir el vector de ataque y condiciones
- Buscar PoC publico y analizar impacto real
- Proponer mitigaciones y parches
- Redactar executive summary para no-tecnicos