Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

292 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66806	Analizada	Media (5.5)	0.43%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+1	11/8/2026	14/8/2026	Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-65807	Analizada	Alta (8.8)	0.82%	—	Microsoft 365 Apps Microsoft Excel Microsoft 365 Microsoft Office 2019+2	11/8/2026	13/8/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-65664	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65661	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65657	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65656	Analizada	Alta (7.8)	0.46%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024	11/8/2026	14/8/2026	Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64920	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64917	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64915	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64914	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64912	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64911	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64908	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64907	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64906	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Access Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64905	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+2	11/8/2026	14/8/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64904	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	14/8/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	13/8/2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64899	Analizada	Media (5.5)	0.54%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-64898	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+1	11/8/2026	13/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	14/8/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+2	11/8/2026	13/8/2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.