Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

203 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (9.1)0.74%—Microsoft Outlook18/12/202417/6/2026
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable…
AnalizadaMedia (5.3)0.26%—Hcltech Traveler FOR Microsoft Outlook12/11/202417/6/2026
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
AnalizadaAlta (8)1.2%—Microsoft Outlook8/10/202417/6/2026
Outlook for Android Elevation of Privilege Vulnerability
AnalizadaAlta (7.5)0.21%—Hcltech Traveler FOR Microsoft Outlook26/9/202417/6/2026
The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Application.
AnalizadaMedia (6.5)1.1%—Microsoft Outlook10/9/202410/8/2026
Microsoft Outlook for iOS Information Disclosure Vulnerability
AnalizadaMedia (6.7)0.66%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook13/8/202417/6/2026
Microsoft Outlook Remote Code Execution Vulnerability
ModificadaMedia (6.5)1.8%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook9/7/202417/6/2026
Microsoft Outlook Spoofing Vulnerability
ModificadaAlta (8.8)3.4%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook11/6/202420/7/2026
Microsoft Outlook Remote Code Execution Vulnerability
AplazadaBaja (2.8)0.18%—Knowbe4 Phish Alert Button FOR OutlookAIKnowbe4 Second Chance ClientAIKnowbe4 PIQ ClientAI7/5/202417/6/2026
A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an arbitrary server, which…
AnalizadaAlta (8.1)2.3%—Microsoft Outlook9/4/202417/6/2026
Outlook for Windows Spoofing Vulnerability
AnalizadaAlta (7.5)2.1%—Microsoft Outlook12/3/202417/6/2026
Outlook for Android Information Disclosure Vulnerability
ModificadaAlta (8.8)11%💥 PoCMicrosoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook13/2/202410/8/2026
Microsoft Outlook Remote Code Execution Vulnerability
ModificadaMedia (5.5)0.33%—Munsoft Easy Outlook Express Recovery2/2/202417/6/2026
A vulnerability, which was classified as problematic, has been found in Munsoft Easy Outlook Express Recovery 2.0. This issue affects some unknown processing of the component Registration Key Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been…
ModificadaAlta (7.5)2.1%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook12/9/202317/6/2026
Microsoft Outlook Information Disclosure Vulnerability
ModificadaMedia (6.1)0.34%—Wpo365 Mail Integration FOR Office 365 / Outlook23/8/202317/6/2026
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 | Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions.
ModificadaMedia (6.5)2.2%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook8/8/202310/8/2026
Microsoft Outlook Spoofing Vulnerability
AnalizadaAlta (7.5)16%⚠ Explotación activaMicrosoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook11/7/202317/6/2026
Microsoft Outlook Security Feature Bypass Vulnerability
ModificadaAlta (8.8)5.7%💥 ExploitMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft OutlookMicrosoft Outlook RT14/6/202317/6/2026
Microsoft Outlook Remote Code Execution Vulnerability
ModificadaAlta (7.5)22%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook1/6/202317/6/2026
Microsoft Outlook Denial of Service Vulnerability
AnalizadaCrítica (9.8)97%⚠ Explotación activa💥 PoCMicrosoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Outlook14/3/202317/6/2026
Microsoft Outlook Elevation of Privilege Vulnerability
ModificadaMedia (6.3)0.55%—Microsoft Outlook13/12/202217/6/2026
Outlook for Android Elevation of Privilege Vulnerability
ModificadaMedia (6.1)0.58%—Fortinet Fortiauthenticator Agent FOR Microsoft Outlook WEB Access18/7/202217/6/2026
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.
ModificadaAlta (7.1)0.38%—Zoom MeetingsZoom Rooms FOR Conference RoomsZoom VDI Windows Meeting ClientsZoom Plugin FOR Microsoft Outlook28/4/202217/6/2026
The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue…
ModificadaMedia (5.3)2.4%—Microsoft Outlook 20169/2/202217/6/2026
Microsoft Outlook for Mac Security Feature Bypass Vulnerability
ModificadaAlta (7.5)0.58%—Zoom Plugin FOR Microsoft Outlook27/9/202117/6/2026
All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application…
Orbitaley — Vulnerabilidades