Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
58 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 5.3% | — | Microsoft Exchange ServerMicrosoft LyncMicrosoft Lync BasicMicrosoft Mail AND Calendar+5 | 15/7/2019 | 17/6/2026 | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security… | |
| Modificada | Media (6.1) | 2.1% | — | Microsoft Lync ServerMicrosoft Skype FOR Business Server | 9/4/2019 | 17/6/2026 | A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'. | |
| Modificada | Media (5.4) | 1.5% | — | Microsoft Skype FOR Business | 17/1/2019 | 17/6/2026 | A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoofing Vulnerability." This affects Skype. | |
| Modificada | Media (5.9) | 5.5% | — | Microsoft LyncMicrosoft Lync BasicMicrosoft OfficeMicrosoft Office 365 Proplus+2 | 14/11/2018 | 17/6/2026 | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype. | |
| Modificada | Alta (8.8) | 16% | — | Microsoft LyncMicrosoft Skype FOR Business | 11/7/2018 | 17/6/2026 | A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync. | |
| Modificada | Alta (7.8) | 5.8% | — | Microsoft LyncMicrosoft Skype FOR Business | 11/7/2018 | 17/6/2026 | A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync. | |
| Modificada | Alta (8.8) | 9.4% | — | Microsoft LyncMicrosoft Skype FOR Business | 13/10/2017 | 17/6/2026 | Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability." | |
| Modificada | Alta (7.5) | 14% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft Office 2007Microsoft Office 2010+5 | 13/9/2017 | 17/6/2026 | Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to execute code remotely via… | |
| Modificada | Media (5.3) | 9.6% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Office 2007+10 | 13/9/2017 | 17/6/2026 | Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync… | |
| Modificada | Baja (3.3) | 14% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Office 2007+10 | 13/9/2017 | 17/6/2026 | The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business… | |
| Modificada | Alta (8.8) | 19% | — | Microsoft LyncMicrosoft OfficeMicrosoft SilverlightMicrosoft Skype FOR Business+7 | 15/6/2017 | 17/6/2026 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics Remote Code Execution… | |
| Modificada | Alta (8.8) | 39% | 💥 Exploit | Microsoft LyncMicrosoft OfficeMicrosoft Office Word ViewerMicrosoft Silverlight+7 | 15/6/2017 | 17/6/2026 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft… | |
| Modificada | Alta (7.8) | 16% | — | Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Project Server+4 | 12/5/2017 | 17/6/2026 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word… | |
| Modificada | Alta (7.8) | 50% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Silverlight+5 | 17/3/2017 | 17/6/2026 | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site,… | |
| Modificada | Media (4.3) | 33% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Office Word Viewer+10 | 17/3/2017 | 17/6/2026 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site,… | |
| Modificada | Media (5.5) | 16% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Office Word Viewer+10 | 17/3/2017 | 17/6/2026 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site,… | |
| Modificada | Crítica (9.8) | 30% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+8 | 14/10/2016 | 17/6/2026 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee;… | |
| Modificada | Alta (7.8) | 24% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+8 | 14/10/2016 | 17/6/2026 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010;… | |
| Modificada | Media (5.5) | 32% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+8 | 14/10/2016 | 17/6/2026 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010;… | |
| Modificada | Media (5.5) | 32% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+8 | 14/10/2016 | 17/6/2026 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010;… | |
| Modificada | Media (5.5) | 54% | 💥 Exploit | Microsoft .net FrameworkMicrosoft Live MeetingMicrosoft LyncMicrosoft Office+10 | 14/10/2016 | 17/6/2026 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010;… | |
| Modificada | Alta (8.1) | 7.2% | — | HP Converged Infrastructure Solution Sizer SuiteHP Insight Management SizerHP Power AdvisorHP SAP Sizing Tool+11 | 22/8/2016 | 17/6/2026 | HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before… | |
| Modificada | Alta (7.8) | 51% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+4 | 9/8/2016 | 17/6/2026 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted… | |
| Modificada | Alta (7.8) | 51% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+4 | 9/8/2016 | 17/6/2026 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted… | |
| Modificada | Alta (7.8) | 44% | 💥 Exploit | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+8 | 9/8/2016 | 17/6/2026 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010… |