Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

636 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-10001	Aplazada	Alta (7.2)	0.56%	—	Import ANY XML CSV OR Excel File TO Wordpress^AI	10/9/2025	17/6/2026	The Import any XML, CSV or Excel File to WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to…
CVE-2025-54904	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54903	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54902	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54901	Analizada	Media (5.5)	0.65%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	9/9/2025	17/6/2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-54900	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54899	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	9/9/2025	17/6/2026	Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54898	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54896	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/9/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-58844	Aplazada	Alta (7.1)	0.13%	—	Subhash Kumar Database TO Excel^AI	5/9/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.This issue affects Database to Excel: from n/a through <= 1.0.
CVE-2025-53741	Analizada	Alta (7.8)	0.52%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53739	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53737	Analizada	Alta (7.8)	0.53%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53735	Analizada	Alta (7.8)	0.56%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/8/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-49711	Analizada	Alta (7.8)	0.49%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-48812	Analizada	Media (5.5)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	8/7/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-47165	Analizada	Alta (7.8)	2.2%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	10/6/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-32704	Analizada	Alta (7.8)	0.43%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	13/5/2025	17/6/2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30383	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30379	Analizada	Alta (7.8)	0.55%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30376	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30375	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29979	Analizada	Alta (7.8)	0.63%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	13/5/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.