Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
159 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 3.3% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 12/1/2021 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 3.5% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 2.7% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Media (5.5) | 1.1% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 10/12/2020 | 17/6/2026 | Microsoft Excel Information Disclosure Vulnerability | |
| Modificada | Alta (7.8) | 3.5% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 3.6% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft Office Online ServerMicrosoft Office WEB Apps | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 3.5% | — | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server | 10/12/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 4.1% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 11/11/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 3.4% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office WEB Apps | 11/11/2020 | 17/6/2026 | Microsoft Excel Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 4.8% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (7.8) | 4.8% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+1 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (7.8) | 3.7% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft Excel WEB APPMicrosoft Office+4 | 16/10/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Alta (8.8) | 3.9% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+2 | 11/9/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user… | |
| Modificada | Media (5.5) | 4.4% | — | Microsoft 365 AppsMicrosoft ExcelMicrosoft OfficeMicrosoft Office Online Server+2 | 11/9/2020 | 17/6/2026 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file… | |
| Modificada | Alta (8.8) | 3.8% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 11/9/2020 | 17/6/2026 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then… | |
| Modificada | Media (5.5) | 4.9% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 17/8/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then… | |
| Modificada | Media (5.5) | 4.6% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 17/8/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then… | |
| Modificada | Alta (8.8) | 10.0% | — | Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Sharepoint Enterprise Server+3 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447. | |
| Modificada | Alta (8.8) | 11% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448. | |
| Modificada | Alta (8.8) | 11% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 14/7/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448. | |
| Modificada | Media (5.5) | 6.1% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+2 | 14/7/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342. | |
| Modificada | Media (6.1) | 1.7% | — | Microsoft Office Online ServerMicrosoft Office WEB Apps | 14/7/2020 | 17/6/2026 | A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. | |
| Modificada | Media (5.5) | 6.4% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 14/7/2020 | 17/6/2026 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445. | |
| Modificada | Alta (7.8) | 12% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+3 | 15/4/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. | |
| Modificada | Alta (7.8) | 12% | — | Microsoft OfficeMicrosoft Office 365 ProplusMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 12/3/2020 | 17/6/2026 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855. |