Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

16.777 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-69759	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69742	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	8/9/2026	9/9/2026	Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-69739	Analizada	Alta (7.5)	0.92%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	8/9/2026	17/9/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69738	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	14/9/2026	Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69734	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	8/9/2026	17/9/2026	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69727	Analizada	Alta (8)	0.77%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69724	Analizada	Alta (8.8)	0.78%	—	Microsoft Sharepoint Server	8/9/2026	9/9/2026	Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69722	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69719	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69716	Analizada	Alta (8.8)	0.99%	—	Microsoft Sharepoint Server	8/9/2026	9/9/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69690	Analizada	Media (5.4)	0.40%	—	Microsoft Sharepoint Server	8/9/2026	9/9/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69686	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69683	Analizada	Alta (7.7)	0.84%	—	Microsoft Sharepoint Server	8/9/2026	9/9/2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69678	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69671	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	8/9/2026	17/9/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69636	Analizada	Media (6.5)	1.00%	—	Microsoft Sharepoint Server	8/9/2026	9/9/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69632	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	8/9/2026	17/9/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69629	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	8/9/2026	9/9/2026	Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-69626	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	8/9/2026	17/9/2026	Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69615	Analizada	Media (4.8)	0.40%	—	Microsoft Sharepoint Server	8/9/2026	10/9/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69614	Analizada	Alta (8.8)	0.86%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	8/9/2026	10/9/2026	Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69599	Analizada	Alta (7.5)	0.66%	—	Microsoft Windows 11 23h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1+1	8/9/2026	14/9/2026	Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69593	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69591	Analizada	Media (5.7)	0.89%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	8/9/2026	14/9/2026	Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.
CVE-2026-69589	Analizada	Alta (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	8/9/2026	11/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.