Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

237 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-55039	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55037	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55036	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55031	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55029	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55025	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55024	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54131	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	14/7/2026	15/7/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-50408	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-48580	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-47642	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	14/7/2026	16/7/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-58618	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55948	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55899	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54988	Analizada	Media (6.1)	0.46%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-50678	Analizada	Baja (3.3)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-50675	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45469	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45455	Modificada	Media (4.3)	0.76%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-44823	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44822	Analizada	Alta (8.2)	0.60%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-44820	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818	Modificada	Alta (7)	0.28%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44817	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	9/6/2026	23/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40362	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/5/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.