Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
–

159 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.8)3.3%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+112/1/202117/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.5%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+110/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)2.7%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+110/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaMedia (5.5)1.1%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+110/12/202017/6/2026
Microsoft Excel Information Disclosure Vulnerability
ModificadaAlta (7.8)3.5%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+110/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.6%—Microsoft 365 AppsMicrosoft ExcelMicrosoft Office Online ServerMicrosoft Office WEB Apps10/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.5%—Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server10/12/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)4.1%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+111/11/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)3.4%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office WEB Apps11/11/202017/6/2026
Microsoft Excel Remote Code Execution Vulnerability
ModificadaAlta (7.8)4.8%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+116/10/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user…
ModificadaAlta (7.8)4.8%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+116/10/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user…
ModificadaAlta (7.8)3.7%—Microsoft 365 AppsMicrosoft ExcelMicrosoft Excel WEB APPMicrosoft Office+416/10/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user…
ModificadaAlta (8.8)3.9%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+211/9/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user…
ModificadaMedia (5.5)4.4%—Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+211/9/202017/6/2026
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file…
ModificadaAlta (8.8)3.8%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+311/9/202017/6/2026
<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then…
ModificadaMedia (5.5)4.9%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+317/8/202017/6/2026
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then…
ModificadaMedia (5.5)4.6%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+317/8/202017/6/2026
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then…
ModificadaAlta (8.8)10.0%—Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Sharepoint Enterprise Server+314/7/202017/6/2026
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
ModificadaAlta (8.8)11%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+414/7/202017/6/2026
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
ModificadaAlta (8.8)11%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+414/7/202017/6/2026
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
ModificadaMedia (5.5)6.1%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+214/7/202017/6/2026
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
ModificadaMedia (6.1)1.7%—Microsoft Office Online ServerMicrosoft Office WEB Apps14/7/202017/6/2026
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
ModificadaMedia (5.5)6.4%—Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+314/7/202017/6/2026
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
ModificadaAlta (7.8)12%—Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+315/4/202017/6/2026
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
ModificadaAlta (7.8)12%—Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+412/3/202017/6/2026
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.