Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior

Críticas / altas1298▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

292 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-45460	Modificada	Media (4.7)	0.42%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft 365 Microsoft Office 2019+2	9/6/2026	23/7/2026	Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45458	Modificada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	9/6/2026	23/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456	Analizada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45455	Modificada	Media (4.3)	0.76%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-44824	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44823	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44822	Analizada	Alta (8.2)	0.60%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-44821	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44820	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44818	Modificada	Alta (7)	0.28%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44817	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2024-38226	Analizada	Alta (7.3)	2.7%	⚠ Explotación activa	Microsoft Office 2019 Microsoft Office Long Term Servicing Channel Microsoft Publisher	10/9/2024	10/8/2026	Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-38189	Analizada	Alta (8.8)	8.2%	⚠ Explotación activa	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office Long Term Servicing Channel Microsoft Project 2016	13/8/2024	17/6/2026	Microsoft Project Remote Code Execution Vulnerability
CVE-2024-21413	Analizada	Crítica (9.8)	95%	⚠ Explotación activa💥 PoC	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office Long Term Servicing Channel	13/2/2024	10/8/2026	Microsoft Outlook Remote Code Execution Vulnerability
CVE-2021-42292	Analizada	Alta (7.8)	43%	⚠ Explotación activa💥 PoC	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office 2016+2	10/11/2021	19/8/2026	Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-38646	Analizada	Alta (7.8)	8.0%	⚠ Explotación activa	Microsoft 365 Apps Microsoft Office Microsoft Office 2016 Microsoft Office 2019	15/9/2021	10/8/2026	Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability