Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-21260	Analizada	Alta (7.5)	1.5%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook+1	10/2/2026	17/6/2026	Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21259	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/2/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.
CVE-2026-21258	Analizada	Media (5.5)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/2/2026	17/6/2026	Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-21509	Analizada	Alta (7.8)	71%	⚠ Explotación activa💥 PoC	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	26/1/2026	25/6/2026	Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-68041	Aplazada	Alta (7.1)	0.21%	—	Codisto Omnichannel FOR Woocommerce^AI	22/1/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through <= 1.3.65.
CVE-2026-20957	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/1/2026	17/6/2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20956	Analizada	Alta (7.8)	0.44%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20955	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	13/1/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20953	Analizada	Alta (8.4)	0.59%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20952	Analizada	Alta (8.4)	0.53%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20950	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/1/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20949	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20948	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	13/1/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20946	Analizada	Alta (7.8)	0.67%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20944	Analizada	Alta (8.4)	0.52%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62080	Aplazada	Media (4.3)	0.12%	—	Channelize Live Shopping Video Streams^AI	31/12/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through <= 2.2.0.
CVE-2025-62081	Aplazada	Media (5.3)	0.25%	—	Channelize Live Shopping AND Shoppable Videos FOR Woocommerce^AI	31/12/2025	17/6/2026	Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through <= 2.2.0.
CVE-2025-62564	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62563	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62562	Analizada	Alta (7.8)	0.81%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2025-62561	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62560	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62559	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62558	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62557	Analizada	Alta (7.8)	0.43%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	9/12/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.