Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

135 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (4.3)20%—Microsoft ExcelMicrosoft OfficeMicrosoft PowerpointMicrosoft Visio+1115/8/201517/6/2026
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word…
AnalizadaAlta (8.8)40%⚠ Explotación activaMicrosoft Excel ViewerMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Powerpoint+214/7/201517/6/2026
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption…
ModificadaAlta (9.3)19%—Microsoft ExcelMicrosoft Excel WEB APPMicrosoft OfficeMicrosoft Office WEB Apps Server+513/5/201517/6/2026
Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011,…
ModificadaAlta (9.3)41%💥 ExploitMicrosoft ExcelMicrosoft PowerpointMicrosoft Word11/3/201517/6/2026
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."
ModificadaAlta (9.3)19%—Microsoft ExcelMicrosoft Excel ViewerMicrosoft OfficeMicrosoft Office Compatibility Pack+711/3/201517/6/2026
Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office…
AnalizadaAlta (7.8)85%⚠ Explotación activa💥 ExploitMicrosoft Excel ViewerMicrosoft LyncMicrosoft OfficeMicrosoft Office Compatibility Pack+46/11/201316/6/2026
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and…
ModificadaAlta (9.3)20%—Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft PowerpointMicrosoft Powerpoint Viewer14/12/201116/6/2026
Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document,…
ModificadaAlta (9.3)18%—Microsoft Powerpoint14/12/201116/6/2026
Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."
ModificadaAlta (9.3)16%—Microsoft Powerpoint13/5/201116/6/2026
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
ModificadaAlta (9.3)15%—Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Open XML File Format ConverterMicrosoft Powerpoint13/5/201116/6/2026
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote…
ModificadaAlta (9.3)30%—Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Powerpoint ViewerMicrosoft Open XML File Format Converter+313/4/201116/6/2026
Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate…
ModificadaAlta (9.3)23%—Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Powerpoint ViewerMicrosoft Open XML File Format Converter+313/4/201116/6/2026
Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer…
ModificadaAlta (9.3)25%—Microsoft Powerpoint10/2/201116/6/2026
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which…
ModificadaAlta (9.3)20%—Microsoft OfficeMicrosoft PowerpointMicrosoft Powerpoint Viewer10/11/201016/6/2026
Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."
AnalizadaAlta (7.8)59%⚠ Explotación activaMicrosoft Powerpoint10/11/201016/6/2026
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
ModificadaAlta (9.3)16%💥 ExploitMicrosoft Powerpoint27/8/201016/6/2026
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml,…
ModificadaAlta (9.3)15%💥 ExploitMicrosoft Powerpoint27/8/201016/6/2026
Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm,…
ModificadaAlta (9.3)29%—Microsoft Powerpoint10/2/201016/6/2026
Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
ModificadaAlta (9.3)51%💥 ExploitMicrosoft Powerpoint10/2/201016/6/2026
Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
ModificadaAlta (9.3)21%—Microsoft Powerpoint10/2/201016/6/2026
Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
ModificadaAlta (9.3)21%—Microsoft OfficeMicrosoft Powerpoint10/2/201016/6/2026
Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
ModificadaAlta (9.3)25%—Microsoft Powerpoint10/2/201016/6/2026
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
ModificadaAlta (9.3)22%—Microsoft Powerpoint10/2/201016/6/2026
Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
ModificadaAlta (9.3)26%—Microsoft Compatibility Pack Word Excel PowerpointMicrosoft ExcelMicrosoft Excel ViewerMicrosoft Office+111/11/200916/6/2026
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the…
ModificadaAlta (9.3)25%—Microsoft Compatibility Pack Word Excel PowerpointMicrosoft ExcelMicrosoft Excel ViewerMicrosoft Office+111/11/200916/6/2026
Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption…
Orbitaley — Vulnerabilidades