Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

303 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-69285	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	8/9/2026	9/9/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-64918	Analizada	Media (6.5)	0.87%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	8/9/2026	9/9/2026	Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-62804	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	8/9/2026	8/9/2026	External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-78512	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	8/9/2026	24/9/2026	Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78510	Modificada	Alta (8.4)	0.34%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	8/9/2026	25/9/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-70105	Analizada	Alta (7.5)	0.97%	—	Microsoft 365 Microsoft Office Microsoft Office 2021 Microsoft Office 2024+1	20/8/2026	4/9/2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70329	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	11/8/2026	14/8/2026	Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70328	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327	Analizada	Media (6.5)	0.92%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70325	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70320	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	12/8/2026	Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70313	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70312	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70311	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70310	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70130	Analizada	Alta (7.8)	0.34%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-68817	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.