Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2716▼ 140 respecto a la semana anterior
Críticas / altas1239▼ 295 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)244▲ 207 respecto a la semana anterior
1359 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 17% | — | Microsoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office WEB Apps ServerMicrosoft Powerpoint+3 | 14/9/2016 | 17/6/2026 | Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 para Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2 y Office Web Apps Server 2013 SP1 permiten a atacantes remotos ejecutar código arbitrario a… | |
| Modificada | Alta (7.8) | 18% | — | Microsoft ExcelMicrosoft Excel FOR MACMicrosoft Excel ViewerMicrosoft Office Compatibility Pack+2 | 14/9/2016 | 17/6/2026 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 para Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services en SharePoint Server 2007 SP3, Excel Services en SharePoint Server 2010 SP2, Excel Automation Services en SharePoint Server 2013 SP1 y Office Online… | |
| Modificada | Alta (7.8) | 55% | 💥 Exploit | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Foundation+2 | 14/9/2016 | 17/6/2026 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word para Mac 2011, Word 2016 para Mac, Word Viewer, Word Automation Services en SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services en SharePoint Server 2013 SP1, Word Automation Services en… | |
| Modificada | Alta (8.1) | 7.2% | — | HP Converged Infrastructure Solution Sizer SuiteHP Insight Management SizerHP Power AdvisorHP SAP Sizing Tool+11 | 22/8/2016 | 17/6/2026 | HPE Smart Update en Storage Sizing Tool en versiones anteriores a 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) en versiones anteriores a 2.13.1, Power Advisor en versiones anteriores a 7.8.2, Insight Management Sizer en versiones anteriores a 16.12.1, Synergy Planning Tool en versiones anteriores a 3.3,… | |
| Modificada | Alta (7.8) | 26% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Online ServerMicrosoft Office WEB Apps+6 | 13/7/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word para Mac 2011, Word 2016 para Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services en SharePoint Server 2010 SP2, Word Automation Services en SharePoint Server 2013 SP1, SharePoint Server… | |
| Modificada | Alta (7.8) | 20% | — | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint ServerMicrosoft Word+2 | 13/7/2016 | 17/6/2026 | Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word para Mac 2011, Word 2016 para Mac, Word Automation Services en SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario a través de un documento de Office manipulado, también… | |
| Modificada | Media (5.5) | 16% | — | Microsoft ExcelMicrosoft Excel RTMicrosoft OfficeMicrosoft Office WEB Apps+5 | 13/7/2016 | 17/6/2026 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services en SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permiten a atacantes… | |
| Modificada | Alta (8.4) | 18% | 💥 Exploit | Symantec Norton SecuritySymantec Protection EngineSymantec Advanced Threat ProtectionSymantec Norton Bootable Removal Tool+14 | 30/6/2016 | 17/6/2026 | El motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) para Mac; Symantec Endpoint… | |
| Modificada | Crítica (9.8) | 25% | 💥 Exploit | Symantec Norton SecuritySymantec Protection EngineSymantec Advanced Threat ProtectionSymantec Norton Bootable Removal Tool+14 | 30/6/2016 | 17/6/2026 | Desbordamiento de entero en el desempaquetado TNEF en el motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec… | |
| Modificada | Alta (8.4) | 18% | 💥 Exploit | Symantec Norton SecuritySymantec Protection EngineSymantec Advanced Threat ProtectionSymantec Norton Bootable Removal Tool+14 | 30/6/2016 | 17/6/2026 | El motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) para Mac; Symantec Endpoint… | |
| Modificada | Alta (7.8) | 53% | — | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | El motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) para Mac; Symantec Endpoint… | |
| Modificada | Alta (7.3) | 11% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | Desbordamiento de buffer en Dec2LHA.dll en el motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint… | |
| Modificada | Alta (7.3) | 21% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | Desbordamiento de buffer en Dec2SS.dll en el motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint Protection… | |
| Modificada | Alta (8.4) | 18% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | El motor AntiVirus Decomposer en Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x hasta la versión 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) en versiones anteriores a 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) para Mac; Symantec Endpoint… | |
| Modificada | Media (5.5) | 24% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Sharepoint Server+2 | 16/6/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2 y Office Web Apps Server 2013 SP1 permiten a atacantes remotos obtener… | |
| Modificada | Alta (7.3) | 15% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Online ServerMicrosoft Office WEB Apps+4 | 16/6/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010… | |
| Modificada | Media (6.1) | 0.77% | — | Lenovo Shareit | 23/5/2016 | 17/6/2026 | Vulnerabilidad de XSS en Lenovo SHAREit en versiones anteriores a 3.5.98_ww en Android en versiones anteriores a 4.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, también conocida como "Universal XSS (UXSS)". | |
| Modificada | Alta (8.8) | 1.9% | — | Lenovo Shareit | 23/5/2016 | 17/6/2026 | Lenovo SHAREit en versiones anteriores a 3.5.98_ww en Android en versiones anteriores a 4.2 permite a atacantes remotos tener un impacto no especificado a través de un intento de manipulación: URL, también conocida como "intent scheme URL attack". | |
| Modificada | Alta (8.8) | 16% | — | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint ServerMicrosoft Word | 11/5/2016 | 17/6/2026 | La librería font de Windows en Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services sobre SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permite a atacantes remotos ejecutar código arbitrario a través de una fuente embebida manipulada, también conocido como "Microsoft Office Graphics RCE… | |
| Modificada | Alta (7.8) | 19% | — | Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server | 11/5/2016 | 17/6/2026 | Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services sobre SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario a través de un documento Office manipulado, también conocido como "Microsoft Office Memory Corruption Vulnerability". | |
| Modificada | Alta (7.8) | 21% | — | Microsoft ExcelMicrosoft Office Compatibility PackMicrosoft Sharepoint DesignerMicrosoft Sharepoint Foundation | 12/4/2016 | 17/6/2026 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services en SharePoint Server 2007 SP3 y Excel Services en SharePoint Server 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario a través de un documento Office manipulado, también conocida como "Microsoft Office Memory… | |
| Modificada | Alta (7.8) | 20% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+2 | 12/4/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2 y Office Web Apps Server 2013 SP1 permiten a… | |
| Modificada | Alta (7.8) | 20% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+3 | 9/3/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word para Mac 2011, Word 2016 para Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services en SharePoint Server 2010 SP2 y 2013 SP1, Office Web Apps 2010 SP2 y Web Apps Server 2013 SP1 permiten a… | |
| Modificada | Alta (7.8) | 16% | — | Microsoft ExcelMicrosoft Excel FOR MACMicrosoft Excel ViewerMicrosoft Office Compatibility Pack+4 | 10/2/2016 | 17/6/2026 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel para Mac 2011, Excel 2016 para Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services en SharePoint Server 2007 SP3, Excel Services en SharePoint Server 2010 SP2, Excel Services en SharePoint Server 2013 SP1 y… | |
| Modificada | Alta (7.8) | 19% | — | Microsoft OfficeMicrosoft Office Compatibility PackMicrosoft Office WEB Apps ServerMicrosoft Sharepoint Server+2 | 10/2/2016 | 17/6/2026 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services en SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1 y SharePoint Server 2013 SP1 permiten a atacantes remotos ejecutar código arbitrario a… |