Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 68 respecto a la semana anterior
Críticas / altas1421▲ 55 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

619 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (5.5)0.45%—Microsoft 365 AppsMicrosoft 365Microsoft Office 2016Microsoft Office 2019+314/7/202616/7/2026
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
AnalizadaMedia (5.5)0.60%—Microsoft 365 AppsMicrosoft 365Microsoft Office 2016Microsoft Office 2019+314/7/202616/7/2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
AnalizadaAlta (8.7)0.95%—Microsoft Sharepoint Server14/7/202615/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server14/7/202616/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server14/7/202615/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server14/7/202615/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaCrítica (9.8)16%⚠ Explotación activaMicrosoft Sharepoint Server14/7/202617/7/2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
AnalizadaCrítica (9.8)1.0%⚠ Explotación activaMicrosoft Sharepoint Server14/7/202614/7/2026
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
AnalizadaMedia (6.5)1.1%—Microsoft Sharepoint Server14/7/202615/7/2026
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaCrítica (9.8)3.0%⚠ Explotación activaMicrosoft Sharepoint Server14/7/202623/7/2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
AnalizadaMedia (4.6)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
ModificadaMedia (5.4)1.1%—Microsoft Sharepoint Server9/6/202623/7/2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
ModificadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
ModificadaMedia (5.4)0.59%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
ModificadaMedia (5.4)0.59%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
ModificadaMedia (5.4)0.53%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaAlta (8)0.98%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AnalizadaBaja (3.3)0.56%—Microsoft 365 AppsMicrosoft 365Microsoft Office 2016Microsoft Office 2019+39/6/202623/7/2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
AnalizadaAlta (8.8)2.3%—Microsoft Sharepoint Server9/6/202623/7/2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.65%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalizadaMedia (5.4)0.58%—Microsoft Sharepoint Server9/6/202623/7/2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.