Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior

Críticas / altas1376▼ 50 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

619 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-20945	Analizada	Media (5.4)	19%	—	Microsoft Sharepoint Server	14/4/2026	17/6/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-26114	Analizada	Alta (8.8)	2.3%	💥 PoC	Microsoft Sharepoint Server	10/3/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26113	Analizada	Alta (7.8)	0.41%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server	10/3/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26106	Analizada	Alta (8.8)	1.3%	—	Microsoft Sharepoint Server	10/3/2026	17/6/2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26105	Analizada	Crítica (9.3)	1.1%	—	Microsoft Sharepoint Server	10/3/2026	17/6/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21511	Analizada	Alta (7.5)	3.9%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	10/2/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21260	Analizada	Alta (7.5)	1.5%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook+1	10/2/2026	17/6/2026	Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-20963	Analizada	Crítica (9.8)	30%	⚠ Explotación activa	Microsoft Sharepoint Server	13/1/2026	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-20959	Analizada	Media (5.4)	7.6%	—	Microsoft Sharepoint Server	13/1/2026	17/6/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-20958	Analizada	Media (5.4)	0.34%	—	Microsoft Sharepoint Server	13/1/2026	17/6/2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-20951	Analizada	Alta (7.8)	0.81%	—	Microsoft Sharepoint Server	13/1/2026	17/6/2026	Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2026-20948	Analizada	Alta (7.8)	0.61%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	13/1/2026	17/6/2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20947	Analizada	Alta (8.8)	19%	—	Microsoft Sharepoint Server	13/1/2026	17/6/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-20943	Analizada	Alta (7)	0.66%	—	Microsoft Office Microsoft Office Deployment Tool Microsoft Sharepoint Server	13/1/2026	17/6/2026	Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-64672	Analizada	Crítica (9)	1.0%	—	Microsoft Sharepoint Server	9/12/2025	17/6/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2025-62562	Analizada	Alta (7.8)	0.81%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2025-62559	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62558	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62555	Analizada	Alta (7)	0.52%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	9/12/2025	30/9/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62204	Analizada	Alta (8)	2.1%	—	Microsoft Sharepoint Server	11/11/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59237	Analizada	Alta (8.8)	2.5%	—	Microsoft Sharepoint Server	14/10/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59235	Analizada	Alta (7.1)	0.66%	—	Microsoft 365 Apps Microsoft Access Microsoft Excel Microsoft Office+3	14/10/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59232	Analizada	Alta (7.1)	0.48%	—	Microsoft 365 Apps Microsoft Access Microsoft Excel Microsoft Office+3	14/10/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59228	Analizada	Alta (8.8)	1.4%	—	Microsoft Sharepoint Server	14/10/2025	17/6/2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59222	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	14/10/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.