Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

262 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-63519	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	13/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63517	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	13/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63515	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62842	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	13/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-58651	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2021 Microsoft Office 2024	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-54733	Pendiente de análisis	Crítica (9.3)	0.88%	—	Moodle Microsoft 365 AND Microsoft Entra ID Plugins^AI Moodle Local O365^AI	16/7/2026	16/7/2026	The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin local_o365 Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users from the upn…
CVE-2026-56195	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56156	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2021 Microsoft Office 2024	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55949	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55947	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55898	Analizada	Alta (7.1)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55142	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55141	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55140	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55139	Analizada	Baja (3.3)	0.48%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55138	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55137	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55136	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55134	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55133	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2021 Microsoft Office 2024	14/7/2026	22/7/2026	Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.
CVE-2026-55132	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55131	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+3	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.