Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior

Críticas / altas1264▼ 228 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior

367 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-49699	Analizada	Alta (7)	0.35%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook+2	8/7/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49698	Analizada	Alta (7.8)	0.60%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	8/7/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49697	Analizada	Alta (8.4)	0.51%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49696	Analizada	Alta (8.4)	0.61%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	8/7/2025	17/6/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49695	Analizada	Alta (8.4)	0.66%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	8/7/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-48812	Analizada	Media (5.5)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-47994	Analizada	Alta (8.6)	3.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/7/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47957	Analizada	Alta (8.4)	1.3%	💥 Exploit	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47953	Analizada	Alta (8.4)	0.54%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47176	Modificada	Alta (7.8)	0.73%	💥 PoC	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47175	Analizada	Alta (7.8)	2.4%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Powerpoint	10/6/2025	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-47174	Analizada	Alta (7.8)	0.49%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-47173	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47171	Analizada	Media (6.7)	1.7%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	10/6/2025	17/6/2026	Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47170	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47169	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47168	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47167	Analizada	Alta (8.4)	0.67%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47165	Analizada	Alta (7.8)	2.2%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/6/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-47164	Analizada	Alta (8.4)	0.66%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47162	Analizada	Alta (8.4)	0.77%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-32705	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2025-32704	Analizada	Alta (7.8)	0.43%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30393	Analizada	Alta (7.8)	0.44%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30388	Analizada	Alta (7.8)	4.2%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Windows 10 1507+14	13/5/2025	17/6/2026	Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.