Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-49699	Analizada	Alta (7)	0.35%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook+2	8/7/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49698	Analizada	Alta (7.8)	0.60%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	8/7/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49697	Analizada	Alta (8.4)	0.51%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49696	Analizada	Alta (8.4)	0.61%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	8/7/2025	17/6/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49695	Analizada	Alta (8.4)	0.66%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	8/7/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-48812	Analizada	Media (5.5)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-47994	Analizada	Alta (8.6)	3.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/7/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
CVE-2025-49965	Aplazada	Media (4.3)	0.15%	—	Oganro Pixelbeds Channel Manager AND Hotel Booking Engine^AI	20/6/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Oganro PixelBeds Channel Manager and Hotel Booking Engine pixelbeds-channel-manager-booking-engine allows Cross Site Request Forgery.This issue affects PixelBeds Channel Manager and Hotel Booking Engine: from n/a through <= 1.0.
CVE-2025-47957	Analizada	Alta (8.4)	1.3%	💥 Exploit	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47953	Analizada	Alta (8.4)	0.54%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47176	Modificada	Alta (7.8)	0.73%	💥 PoC	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47175	Analizada	Alta (7.8)	2.4%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Powerpoint	10/6/2025	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-47174	Analizada	Alta (7.8)	0.49%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-47173	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47171	Analizada	Media (6.7)	1.7%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	10/6/2025	17/6/2026	Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47170	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47169	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47168	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47167	Analizada	Alta (8.4)	0.67%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47165	Analizada	Alta (7.8)	2.2%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/6/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-47164	Analizada	Alta (8.4)	0.66%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47162	Analizada	Alta (8.4)	0.77%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-5493	Analizada	Media (5.3)	0.48%	—	Baison Channel Middleware Product	3/6/2025	17/6/2026	A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been…
CVE-2025-4574	Aplazada	Media (6.5)	0.54%	—	Crossbeam-channel^AI	13/5/2025	30/6/2026	In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
CVE-2025-32705	Analizada	Alta (7.8)	0.50%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.