Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
–

619 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.4)2.0%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server12/1/202117/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaAlta (7.8)3.9%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+412/1/202117/6/2026
Microsoft Word Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.9%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+412/1/202117/6/2026
Microsoft Word Remote Code Execution Vulnerability
ModificadaAlta (8)2.4%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server12/1/202117/6/2026
Microsoft SharePoint Elevation of Privilege Vulnerability
ModificadaAlta (8.8)3.9%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server12/1/202117/6/2026
Microsoft SharePoint Server Remote Code Execution Vulnerability
ModificadaMedia (5.4)2.0%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server12/1/202117/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaAlta (7.8)3.5%—Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (8.8)3.0%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft SharePoint Remote Code Execution Vulnerability
ModificadaMedia (6.5)3.1%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft SharePoint Information Disclosure Vulnerability
ModificadaCrítica (9.8)3.8%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft SharePoint Remote Code Execution Vulnerability
ModificadaAlta (8)2.7%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaAlta (8)2.9%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft SharePoint Elevation of Privilege Vulnerability
ModificadaAlta (8.8)4.3%—Microsoft Sharepoint FoundationMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Remote Code Execution Vulnerability
ModificadaMedia (5.4)1.9%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaMedia (6.5)3.8%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Information Disclosure Vulnerability
ModificadaAlta (8.8)3.2%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaMedia (6.5)2.0%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Server Spoofing Vulnerability
ModificadaMedia (6.5)3.1%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server11/11/202017/6/2026
Microsoft SharePoint Information Disclosure Vulnerability
ModificadaMedia (6.5)3.8%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log…
ModificadaAlta (7.8)71%💥 ExploitMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm…
ModificadaAlta (7.8)1.4%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm…
ModificadaMedia (5.5)4.2%—Microsoft Sharepoint Server16/10/202017/6/2026
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log…
ModificadaMedia (6.5)3.8%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log…
ModificadaMedia (5.4)1.6%—Microsoft Sharepoint DesignerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>…
ModificadaMedia (5.4)1.7%—Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server16/10/202017/6/2026
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>…