Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32704	Analizada	Alta (7.8)	0.43%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30393	Analizada	Alta (7.8)	0.44%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30388	Analizada	Alta (7.8)	4.2%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Windows 10 1507+14	13/5/2025	17/6/2026	Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2025-30386	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30383	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30379	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30376	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30375	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29979	Analizada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29978	Analizada	Alta (7.8)	0.53%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-29977	Analizada	Alta (7.8)	0.62%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-31377	Aplazada	Alta (7.5)	0.69%	—	Asaquzzaman Mishu WOO Product Feed FOR Marketing Channels^AI	9/4/2025	17/6/2026	Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Product Feed For Marketing Channels: from n/a through <= 1.9.0.
CVE-2025-29822	Analizada	Alta (7.8)	0.82%	—	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Onenote	8/4/2025	17/6/2026	Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-29820	Analizada	Alta (7.8)	0.77%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29816	Analizada	Alta (7.5)	0.46%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	8/4/2025	17/6/2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-29792	Analizada	Alta (7.3)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-29791	Analizada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27752	Analizada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27751	Analizada	Alta (7.8)	2.5%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/4/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27750	Analizada	Alta (7.8)	0.86%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27749	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27748	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27747	Analizada	Alta (7.8)	0.82%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.