Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

135 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.8)1.2%—Microsoft ExcelMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Powerpoint+413/2/202410/8/2026
Microsoft Office Remote Code Execution Vulnerability
ModificadaAlta (7.8)2.7%—Microsoft ExcelMicrosoft Excel MobileMicrosoft PowerpointMicrosoft Powerpoint Mobile+1215/4/202217/6/2026
Windows Graphics Component Remote Code Execution Vulnerability
ModificadaAlta (7.8)4.3%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Powerpoint11/3/202119/8/2026
Microsoft PowerPoint Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.5%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Powerpoint10/12/202017/6/2026
Microsoft PowerPoint Remote Code Execution Vulnerability
ModificadaAlta (8.8)8.8%—Microsoft AccessMicrosoft ExcelMicrosoft OfficeMicrosoft Office 365 Proplus+615/4/202017/6/2026
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
ModificadaAlta (7.8)18%—Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Powerpoint10/12/201917/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.
ModificadaMedia (5.5)13%—Microsoft Excel ViewerMicrosoft OfficeMicrosoft Office 365 ProplusMicrosoft Powerpoint Viewer+15/3/201917/6/2026
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
ModificadaAlta (7.8)16%—Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Compatibility PackMicrosoft Office Online Server+512/12/201817/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint…
ModificadaAlta (8.8)20%—Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft PowerpointMicrosoft Powerpoint Viewer10/10/201817/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint.
ModificadaAlta (7.8)20%—Microsoft Excel ViewerMicrosoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Compatibility Pack+610/10/201817/6/2026
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft…
ModificadaMedia (5.5)2.3%—Microsoft Excel ViewerMicrosoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Compatibility Pack+310/10/201817/6/2026
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint…
ModificadaAlta (8.8)18%—Microsoft Powerpoint15/8/201817/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft PowerPoint.
ModificadaAlta (7.8)21%—Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Powerpoint ViewerMicrosoft Office Word Viewer11/7/201817/6/2026
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office Word Viewer.
ModificadaAlta (7.8)22%—Microsoft Office Online ServerMicrosoft PowerpointMicrosoft Sharepoint Server13/9/201717/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.
ModificadaAlta (7.8)22%—Microsoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office WEB Apps ServerMicrosoft Powerpoint+313/9/201717/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013…
ModificadaAlta (7.8)17%—Microsoft PowerpointMicrosoft Sharepoint Server15/6/201717/6/2026
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability".
ModificadaAlta (7.8)21%—Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Office WEB Apps Server+215/6/201717/6/2026
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
ModificadaAlta (7.8)19%—Microsoft Powerpoint FOR MAC12/5/201717/6/2026
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0264.
ModificadaAlta (7.8)14%—Microsoft Powerpoint FOR MAC12/5/201717/6/2026
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0265.
ModificadaAlta (7.8)18%—Microsoft Office WEB AppsMicrosoft PowerpointMicrosoft Powerpoint Viewer10/11/201617/6/2026
Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
ModificadaAlta (7.8)17%—Microsoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office WEB Apps ServerMicrosoft Powerpoint+314/9/201617/6/2026
Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a…
ModificadaMedia (5.5)16%—Microsoft ExcelMicrosoft Excel RTMicrosoft OfficeMicrosoft Office WEB Apps+513/7/201617/6/2026
Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote…
ModificadaMedia (4.3)11%—Microsoft ExcelMicrosoft OfficeMicrosoft PowerpointMicrosoft Visio+213/1/201617/6/2026
Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013…
ModificadaAlta (7.8)21%—Microsoft Excel FOR MACMicrosoft OfficeMicrosoft Powerpoint FOR MACMicrosoft Word FOR MAC+113/1/201617/6/2026
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document,…
ModificadaAlta (9.3)17%—Microsoft AccessMicrosoft ExcelMicrosoft InfopathMicrosoft Lync+1011/11/201517/6/2026
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2,…
Orbitaley — Vulnerabilidades