Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-54898	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54896	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-57805	Aplazada	Alta (8.7)	0.32%	—	Scratch Channel^AI	25/8/2025	17/6/2026	The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.
CVE-2025-55301	Aplazada	Media (6.7)	0.17%	—	Scratch Channel^AI	25/8/2025	17/6/2026	The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.
CVE-2025-54679	Aplazada	Alta (7.5)	0.38%	—	Vertim Neon Channel Product Customizer Free^AI	14/8/2025	17/6/2026	Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through <= 2.0.
CVE-2025-53784	Analizada	Alta (8.4)	0.50%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	12/8/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53761	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Powerpoint	12/8/2025	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-53759	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	12/8/2025	17/6/2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53741	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53740	Analizada	Alta (8.4)	0.57%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/8/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53739	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53738	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/8/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53737	Analizada	Alta (7.8)	0.53%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53736	Analizada	Media (6.2)	0.50%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	12/8/2025	17/6/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53735	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53734	Analizada	Alta (7.8)	0.44%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/8/2025	17/6/2026	Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-53733	Analizada	Alta (8.4)	0.55%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	12/8/2025	17/6/2026	Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53731	Analizada	Alta (8.4)	0.57%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/8/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53730	Analizada	Alta (7.8)	0.42%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/8/2025	17/6/2026	Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-53903	Aplazada	Baja (1.3)	0.35%	—	Scratch Channel^AI	15/7/2025	17/6/2026	The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/users.js` doesn't properly sanitize text box inputs, leading to a potential vulnerability to cross-site scripting attacks. Commit 90b39eb56b27b2bac29001abb1a3cac0964b8ddb addresses this issue.
CVE-2025-49711	Analizada	Alta (7.8)	0.49%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-49705	Analizada	Alta (7.8)	0.41%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Powerpoint	8/7/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-49703	Analizada	Alta (7.8)	0.67%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	8/7/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49702	Analizada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	8/7/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49700	Analizada	Alta (7.8)	0.41%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	8/7/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.