Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
124 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 18% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+10 | 9/12/2015 | 17/6/2026 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and… | |
| Modificada | Alta (9.3) | 17% | — | Microsoft Live MeetingMicrosoft LyncMicrosoft OfficeMicrosoft Skype FOR Business+3 | 9/12/2015 | 17/6/2026 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory… | |
| Modificada | Alta (9.3) | 15% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft WordMicrosoft Word Viewer | 11/11/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | |
| Modificada | Alta (9.3) | 15% | — | Microsoft OfficeMicrosoft WordMicrosoft Word Viewer | 11/11/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | |
| Modificada | Alta (9.3) | 14% | — | Microsoft OfficeMicrosoft Word Viewer | 15/8/2015 | 17/6/2026 | Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | |
| Modificada | Alta (9.3) | 27% | 💥 Exploit | Microsoft OfficeMicrosoft WordMicrosoft Word Viewer | 15/8/2015 | 17/6/2026 | Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability." | |
| Modificada | Alta (9.3) | 30% | 💥 Exploit | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Sharepoint ServerMicrosoft Word+3 | 15/8/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote… | |
| Analizada | Alta (8.8) | 40% | ⚠ Explotación activa | Microsoft Excel ViewerMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Powerpoint+2 | 14/7/2015 | 17/6/2026 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption… | |
| Modificada | Alta (9.3) | 14% | — | Microsoft OfficeMicrosoft WordMicrosoft Word Viewer | 14/7/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | |
| Modificada | Alta (7.5) | 2.3% | — | Hancom Hanword Viewer 2007Hancom Hanword Viewer 2010Hancom HWP 2014Hancom Hwpviewer 2014 | 15/5/2015 | 17/6/2026 | Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service (crash) and possibly "influence the program's… | |
| Modificada | Alta (9.3) | 16% | — | Microsoft Office Compatibility PackMicrosoft WordMicrosoft Word Viewer | 14/4/2015 | 17/6/2026 | Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." | |
| Modificada | Alta (9.3) | 27% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Sharepoint Server+2 | 14/4/2015 | 17/6/2026 | Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allows remote attackers to execute… | |
| Modificada | Alta (9.3) | 23% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Sharepoint Server+2 | 14/4/2015 | 17/6/2026 | Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps Server 2010 SP2 allows remote attackers to execute arbitrary code via a crafted Office document, aka… | |
| Modificada | Alta (9.3) | 13% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+3 | 11/3/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, and Web Apps Server… | |
| Modificada | Alta (9.3) | 30% | 💥 Exploit | Microsoft WEB ApplicationsMicrosoft Office Compatibility PackMicrosoft Word Automation ServicesMicrosoft Word+3 | 11/2/2015 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka… | |
| Modificada | Alta (9.3) | 14% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Sharepoint ServerMicrosoft WEB Applications+1 | 11/12/2014 | 17/6/2026 | Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Gold and SP1 allows… | |
| Modificada | Alta (9.3) | 16% | — | Microsoft Office Compatibility PackMicrosoft Office Word ViewerMicrosoft Word | 11/11/2014 | 17/6/2026 | Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Invalid Pointer Remote Code Execution Vulnerability." | |
| Modificada | Alta (9.3) | 17% | — | Microsoft Office Compatibility PackMicrosoft Office Word ViewerMicrosoft Word | 11/11/2014 | 17/6/2026 | Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Bad Index Remote Code Execution Vulnerability." | |
| Modificada | Alta (9.3) | 18% | — | Microsoft Office Compatibility PackMicrosoft Office Word ViewerMicrosoft Word | 11/11/2014 | 17/6/2026 | Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Double Delete Remote Code Execution Vulnerability." | |
| Analizada | Alta (7.8) | 77% | ⚠ Explotación activa💥 Exploit | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office WEB Apps Server+3 | 25/3/2014 | 17/6/2026 | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary… | |
| Modificada | Alta (9.3) | 15% | — | Microsoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+2 | 15/1/2014 | 17/6/2026 | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory… | |
| Modificada | Alta (9.3) | 16% | — | Microsoft Office Compatibility PackMicrosoft WordMicrosoft Word Viewer | 15/1/2014 | 17/6/2026 | Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." | |
| Analizada | Alta (7.8) | 85% | ⚠ Explotación activa💥 Exploit | Microsoft Excel ViewerMicrosoft LyncMicrosoft OfficeMicrosoft Office Compatibility Pack+4 | 6/11/2013 | 16/6/2026 | GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and… | |
| Modificada | Alta (9.3) | 21% | — | Microsoft Office Compatibility PackMicrosoft WordMicrosoft Word ViewerMicrosoft Office WEB Apps+1 | 11/9/2013 | 16/6/2026 | Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | |
| Modificada | Alta (9.3) | 21% | — | Microsoft Sharepoint ServerMicrosoft Office Compatibility PackMicrosoft WordMicrosoft Word Viewer+1 | 11/9/2013 | 16/6/2026 | Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory… |