Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2983▼ 79 respecto a la semana anterior

Críticas / altas1412▲ 62 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

619 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-45475	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45471	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	9/6/2026	23/7/2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45468	Analizada	Media (5.4)	0.58%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45467	Analizada	Media (5.4)	0.58%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45465	Modificada	Media (5.4)	0.59%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-45464	Modificada	Media (5.4)	0.59%	—	Microsoft Sharepoint Server	9/6/2026	20/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-45462	Analizada	Media (5.4)	0.58%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45458	Modificada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	9/6/2026	23/7/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456	Analizada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45454	Analizada	Alta (8.8)	1.5%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-45453	Modificada	Media (5.4)	0.59%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-44824	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44821	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44819	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	9/6/2026	23/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-33113	Modificada	Media (6.1)	0.60%	—	Microsoft Sharepoint Server	9/6/2026	23/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-47294	Modificada	Alta (8)	1.2%	—	Microsoft Sharepoint Server	1/6/2026	22/7/2026	Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-45659	Analizada	Alta (8.8)	2.7%	⚠ Explotación activa💥 PoC	Microsoft Sharepoint Server	22/5/2026	23/7/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40368	Analizada	Alta (8)	2.1%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40367	Modificada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	12/5/2026	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40365	Modificada	Alta (8.8)	1.1%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40357	Analizada	Alta (8.8)	2.3%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439	Analizada	Alta (8.8)	2.3%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112	Analizada	Alta (8.8)	2.3%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110	Analizada	Alta (8.8)	2.3%	—	Microsoft Sharepoint Server	12/5/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-32201	Analizada	Media (6.5)	43%	⚠ Explotación activa💥 PoC	Microsoft Sharepoint Server	14/4/2026	17/6/2026	Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.