Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 69 respecto a la semana anterior

Críticas / altas1419▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

62 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32711	Modificada	Alta (7.5)	8.0%	💥 PoC	Microsoft 365 Copilot	11/6/2025	17/6/2026	Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-47953	Analizada	Alta (8.4)	0.54%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47167	Analizada	Alta (8.4)	0.67%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47164	Analizada	Alta (8.4)	0.66%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47162	Analizada	Alta (8.4)	0.77%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30388	Analizada	Alta (7.8)	4.2%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Windows 10 1507+14	13/5/2025	17/6/2026	Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-30386	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26687	Analizada	Alta (7.5)	1.1%	—	Microsoft 365 Copilot Microsoft Office Microsoft Windows 10 1507 Microsoft Windows 10 1607+13	8/4/2025	17/6/2026	Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
CVE-2024-38250	Analizada	Alta (7.8)	0.70%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Windows 10 1507+13	10/9/2024	10/8/2026	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-36565	Modificada	Alta (7)	0.42%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/10/2023	17/6/2026	Microsoft Office Graphics Elevation of Privilege Vulnerability
CVE-2023-23391	Modificada	Media (5.5)	0.65%	—	Microsoft 365 Copilot	14/3/2023	17/6/2026	Office for Android Spoofing Vulnerability
CVE-2021-43905	Analizada	Crítica (9.6)	2.8%	—	Microsoft 365 Copilot	15/12/2021	17/6/2026	Microsoft Office app Remote Code Execution Vulnerability