Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2753▼ 36 respecto a la semana anterior

Críticas / altas1269▼ 264 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)241▲ 206 respecto a la semana anterior

18.401 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-70330	Analizada	Alta (7.8)	0.34%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	11/8/2026	18/8/2026	Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70329	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	11/8/2026	14/8/2026	Un desbordamiento o vuelta de enteros en Microsoft Office Outlook permite a un atacante no autorizado ejecutar código a través de una red.
CVE-2026-70328	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Una lectura fuera de límites en Microsoft Office Excel permite a un atacante no autorizado divulgar información a través de una red.
CVE-2026-70327	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Una lectura fuera de límites en Microsoft Office Excel permite a un atacante no autorizado divulgar información a través de una red.
CVE-2026-70326	Analizada	Alta (8.8)	0.78%	—	Microsoft Sharepoint Server	11/8/2026	13/8/2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70325	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70324	Analizada	Alta (8.8)	0.94%	—	Microsoft Sharepoint Server	11/8/2026	13/8/2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70323	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70321	Analizada	Alta (8.8)	1.7%	—	Microsoft Sharepoint Server	11/8/2026	13/8/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70320	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	12/8/2026	Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70313	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70312	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70311	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70310	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70307	Analizada	Alta (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	11/8/2026	16/8/2026	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70306	Analizada	Crítica (9.3)	1.0%	—	Microsoft Sharepoint Server	11/8/2026	16/8/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70304	Analizada	Alta (7.8)	0.34%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	11/8/2026	17/8/2026	Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70130	Analizada	Alta (7.8)	0.34%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024	11/8/2026	14/8/2026	Un desbordamiento de búfer basado en montículo (heap) en Microsoft Office permite a un atacante no autorizado ejecutar código localmente.