Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior

Críticas / altas1298▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

636 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-8577	Modificada	Alta (7.8)	19%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Microsoft Office 365 Proplus+2	14/11/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from…
CVE-2018-8502	Modificada	Alta (8.8)	20%	—	Microsoft Excel Microsoft Office Microsoft Office 365 Proplus	10/10/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.
CVE-2018-8432	Modificada	Alta (7.8)	20%	—	Microsoft Excel Viewer Microsoft Office Microsoft Office 365 Proplus Microsoft Office Compatibility Pack+6	10/10/2018	17/6/2026	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft…
CVE-2018-8427	Modificada	Media (5.5)	2.3%	—	Microsoft Excel Viewer Microsoft Office Microsoft Office 365 Proplus Microsoft Office Compatibility Pack+3	10/10/2018	17/6/2026	An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint…
CVE-2018-8429	Modificada	Media (5.5)	12%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Microsoft Office Compatibility Pack+1	13/9/2018	17/6/2026	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8331	Modificada	Alta (7.8)	20%	—	Microsoft Excel Microsoft Office	13/9/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office.
CVE-2018-16459	Modificada	Media (6.1)	0.76%	—	Exceljs Project Exceljs	6/9/2018	17/6/2026	An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
CVE-2018-8382	Modificada	Media (5.5)	12%	—	Microsoft Excel Microsoft Excel 2013 RT Microsoft Excel Viewer Microsoft Office+1	15/8/2018	17/6/2026	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8379	Modificada	Alta (7.8)	17%	—	Microsoft Excel Microsoft Excel 2013 RT	15/8/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-8375.
CVE-2018-8378	Modificada	Media (5.5)	8.2%	—	Microsoft Excel Viewer Microsoft Office Microsoft Office Compatibility Pack Microsoft Office WEB Apps+5	15/8/2018	17/6/2026	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word…
CVE-2018-8375	Modificada	Alta (7.8)	16%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Microsoft Office Compatibility Pack	15/8/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8379.
CVE-2018-12977	Modificada	Alta (8.8)	1.4%	—	Softexpert Excellence Suite	9/7/2018	17/6/2026	A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section.
CVE-2018-8246	Modificada	Media (5.5)	19%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Microsoft Office Compatibility Pack	14/6/2018	17/6/2026	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8163	Modificada	Media (5.5)	13%	—	Microsoft Excel Microsoft Office	9/5/2018	17/6/2026	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Excel.
CVE-2018-8162	Modificada	Alta (7.8)	25%	—	Microsoft Excel Microsoft Office Microsoft Office FOR MAC	9/5/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8147, CVE-2018-8148.
CVE-2018-8148	Modificada	Alta (7.8)	25%	—	Microsoft Excel Microsoft Office Microsoft Office Compatibility Pack Microsoft Office FOR MAC	9/5/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8147, CVE-2018-8162.
CVE-2018-8147	Modificada	Alta (7.8)	25%	—	Microsoft Excel Microsoft Office Microsoft Office Compatibility Pack Microsoft Office FOR MAC	9/5/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8148, CVE-2018-8162.
CVE-2018-1029	Modificada	Alta (7.8)	21%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Compatibility Pack	12/4/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-0920,…
CVE-2018-1028	Modificada	Alta (8.8)	19%	—	Microsoft Excel Services Microsoft Office Microsoft Office 2010 Microsoft Office WEB Apps+2	12/4/2018	17/6/2026	A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.
CVE-2018-1027	Modificada	Alta (7.8)	19%	—	Microsoft Excel Microsoft Office Compatibility Pack	12/4/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel, Microsoft Office. This CVE ID is unique from CVE-2018-0920, CVE-2018-1011, CVE-2018-1029.
CVE-2018-1011	Modificada	Alta (7.8)	20%	—	Microsoft Excel Microsoft Excel RT	12/4/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-0920, CVE-2018-1027, CVE-2018-1029.
CVE-2018-0920	Modificada	Alta (7.8)	21%	—	Microsoft Excel	12/4/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029.
CVE-2018-0907	Modificada	Alta (7.8)	5.9%	—	Microsoft Excel Microsoft Office	14/3/2018	17/6/2026	Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypass vulnerability due to how macro settings are enforced, aka "Microsoft Office Excel Security Feature Bypass".
CVE-2018-0796	Modificada	Alta (8.8)	23%	—	Microsoft Excel Microsoft Excel Viewer Microsoft Office Microsoft Office Compatibility Pack	10/1/2018	17/6/2026	Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability".
CVE-2017-11884	Modificada	Alta (7.8)	9.5%	—	Microsoft Excel	15/11/2017	17/6/2026	Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882.