Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

108 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-55056	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55049	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55045	Analizada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55042	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55035	Analizada	Baja (3.3)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55028	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55027	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55026	Analizada	Media (5.5)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55023	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55022	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55018	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55017	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50665	Analizada	Baja (3.3)	0.51%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-50467	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50314	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50301	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-47290	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	14/7/2026	16/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-56193	Analizada	Baja (3.3)	0.50%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45645	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	9/6/2026	23/7/2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45485	Analizada	Baja (3.3)	0.56%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45475	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45474	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft 365 Microsoft Office 2016+3	9/6/2026	23/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45472	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft 365 Microsoft Office 2016+3	9/6/2026	23/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45463	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft 365 Microsoft Office 2016+3	9/6/2026	23/7/2026	Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45461	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft 365 Microsoft Office 2016+3	9/6/2026	23/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.