Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2727▼ 513 respecto a la semana anterior

Críticas / altas1294▼ 200 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

367 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-30386	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30383	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30379	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30376	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30375	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29979	Analizada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29978	Analizada	Alta (7.8)	0.53%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-29977	Analizada	Alta (7.8)	0.62%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29822	Analizada	Alta (7.8)	0.82%	—	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Onenote	8/4/2025	17/6/2026	Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-29820	Analizada	Alta (7.8)	0.77%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29816	Analizada	Alta (7.5)	0.46%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	8/4/2025	17/6/2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-29792	Analizada	Alta (7.3)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-29791	Analizada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27752	Analizada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27751	Analizada	Alta (7.8)	2.5%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/4/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27750	Analizada	Alta (7.8)	0.86%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27749	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27748	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27747	Analizada	Alta (7.8)	0.82%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-27746	Analizada	Alta (7.8)	0.86%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+1	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27745	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26642	Analizada	Alta (7.8)	0.80%	—	Microsoft 365 Apps Microsoft Access Microsoft Excel Microsoft Office+3	8/4/2025	17/6/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26630	Analizada	Alta (7.8)	0.97%	—	Microsoft 365 Apps Microsoft Access Microsoft Office Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.