Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

621 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-25215	Analizada	Media (6.8)	0.18%	—	Passfab Excel Password Recovery	26/3/2026	17/6/2026	Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data into the registration…
CVE-2026-26133	Modificada	Alta (7.1)	0.54%	—	Microsoft 365 Copilot Microsoft Edge Microsoft Excel Microsoft Loop+6	16/3/2026	17/6/2026	AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-26112	Analizada	Alta (7.8)	0.48%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/3/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26109	Analizada	Alta (7.8)	0.35%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/3/2026	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26108	Analizada	Alta (7.8)	0.48%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/3/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26107	Analizada	Alta (7.8)	0.48%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/3/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-21261	Analizada	Media (5.5)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/2/2026	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-21259	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/2/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.
CVE-2026-21258	Analizada	Media (5.5)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/2/2026	17/6/2026	Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-20957	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/1/2026	17/6/2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20950	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/1/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20946	Analizada	Alta (7.8)	0.67%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	13/1/2026	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62564	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62563	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62561	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62560	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62556	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/12/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62553	Analizada	Alta (7.8)	0.66%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	9/12/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62203	Analizada	Alta (7.8)	0.51%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62202	Analizada	Alta (7.1)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-62201	Analizada	Alta (7.8)	0.48%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62200	Analizada	Alta (7.8)	0.48%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62199	Modificada	Alta (7.8)	0.76%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Excel Microsoft Office Long Term Servicing Channel	11/11/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-60727	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-60726	Analizada	Alta (7.1)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/11/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.