Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2715▼ 529 respecto a la semana anterior

Críticas / altas1290▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-36762	Modificada	Alta (7.3)	0.84%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	12/9/2023	17/6/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2023-36761	Analizada	Media (6.5)	20%	⚠ Explotación activa	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/9/2023	17/6/2026	Microsoft Word Information Disclosure Vulnerability
CVE-2023-28693	Modificada	Media (6.1)	0.38%	—	Balasahebbhise Advanced Youtube Channel Pagination	17/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Balasaheb Bhise Advanced Youtube Channel Pagination plugin <= 1.0 version.
CVE-2023-36897	Modificada	Media (6.5)	1.7%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Visual Studio 2010 Tools FOR Office Runtime+3	8/8/2023	10/8/2026	Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVE-2023-36896	Modificada	Alta (7.8)	0.98%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	8/8/2023	10/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36895	Modificada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/8/2023	10/8/2026	Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-36893	Modificada	Media (6.5)	2.2%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	8/8/2023	10/8/2026	Microsoft Outlook Spoofing Vulnerability
CVE-2023-36866	Modificada	Alta (7.8)	0.76%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/8/2023	10/8/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-36865	Modificada	Alta (7.8)	0.76%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/8/2023	10/8/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-35372	Modificada	Alta (7.8)	0.98%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/8/2023	10/8/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-35371	Modificada	Alta (7.8)	0.98%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	8/8/2023	10/8/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2023-33162	Modificada	Media (5.5)	0.76%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	11/7/2023	17/6/2026	Microsoft Excel Information Disclosure Vulnerability
CVE-2023-33161	Modificada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33158	Modificada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33153	Modificada	Alta (8.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-33152	Modificada	Alta (7.8)	0.53%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft ActiveX Remote Code Execution Vulnerability
CVE-2023-33151	Modificada	Media (6.5)	3.4%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Outlook Spoofing Vulnerability
CVE-2023-33150	Modificada	Crítica (9.6)	2.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	11/7/2023	17/6/2026	Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33149	Modificada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-33148	Modificada	Alta (7.8)	2.1%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/7/2023	17/6/2026	Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-35311	En análisis	Alta (7.5)	16%	⚠ Explotación activa	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	11/7/2023	7/10/2026	Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-27845	Modificada	Crítica (9.8)	1.0%	—	Kerawen Omnichannel Stocks	7/7/2023	17/6/2026	SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components.
CVE-2023-34006	Modificada	Media (4.8)	0.37%	—	Telegram BOT & Channel Project Telegram BOT & Channel	22/6/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Telegram Bot & Channel plugin <= 3.6.2 versions.
CVE-2023-28295	Modificada	Alta (7.8)	0.74%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Publisher	17/6/2023	17/6/2026	Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-28287	Modificada	Alta (7.8)	0.74%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Publisher	17/6/2023	17/6/2026	Microsoft Publisher Remote Code Execution Vulnerability