Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
164 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 3.5% | — | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 4.1% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 11/11/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 3.4% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office WEB Apps | 11/11/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 4.8% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (7.8) | 4.8% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (7.8) | 3.7% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft Excel WEB APPMicrosoft Office+4 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (8.8) | 3.9% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+2 | 11/9/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Media (5.5) | 4.4% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+2 | 11/9/2020 | 17/6/2026 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file… | |
| Modificada | Alta (8.8) | 3.8% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 11/9/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then… | |
| Modificada | Media (5.5) | 4.9% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 17/8/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then… | |
| Modificada | Media (5.5) | 4.6% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 17/8/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then… | |
| Modificada | Alta (8.8) | 10.0% | — | Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Sharepoint Enterprise Server+3 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447. | |
| Modificada | Alta (8.8) | 11% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448. | |
| Modificada | Alta (8.8) | 11% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448. | |
| Modificada | Media (5.5) | 6.1% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+2 | 14/7/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342. | |
| Modificada | Media (6.1) | 1.7% | — | Microsoft Office Online ServerMicrosoft Office WEB Apps | 14/7/2020 | 17/6/2026 | A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. | |
| Modificada | Media (5.5) | 6.4% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 14/7/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445. | |
| Modificada | Alta (7.8) | 12% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 15/4/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. | |
| Modificada | Alta (7.8) | 12% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 12/3/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855. | |
| Modificada | Alta (7.8) | 4.9% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 14/8/2019 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on… | |
| Modificada | Alta (7.8) | 4.9% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 12/6/2019 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take… | |
| Modificada | Alta (8.8) | 22% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps Server+4 | 8/1/2019 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online… | |
| Modificada | Media (5.5) | 7.9% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+2 | 8/1/2019 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word. | |
| Modificada | Alta (7.8) | 16% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Compatibility PackMicrosoft Office Online Server+5 | 12/12/2018 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint… | |
| Modificada | Alta (7.8) | 19% | — | Microsoft ExcelMicrosoft Excel ViewerMicrosoft OfficeMicrosoft Office 365 Proplus+2 | 14/11/2018 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from… |