Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

2087 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-55142	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55135	Analizada	Media (5.4)	0.58%	—	Microsoft Sharepoint Server	14/7/2026	16/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55134	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55130	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft Office 2019 Microsoft Office 2021 Microsoft Office 2024+2	14/7/2026	15/7/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+4	14/7/2026	16/7/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55127	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+4	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55126	Analizada	Media (5.4)	0.65%	—	Microsoft Sharepoint Server	14/7/2026	16/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55125	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55124	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+4	14/7/2026	16/7/2026	Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55121	Analizada	Media (5.5)	0.51%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	15/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55055	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55052	Analizada	Alta (8.8)	0.94%	—	Microsoft Sharepoint Server	14/7/2026	16/7/2026	Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-55051	Analizada	Media (6.5)	0.91%	—	Microsoft Sharepoint Server	14/7/2026	16/7/2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-55050	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+4	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55047	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55045	Analizada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55040	Analizada	Crítica (9.1)	70%	⚠ Explotación activa💥 Exploit	Microsoft Sharepoint Server	14/7/2026	19/8/2026	Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-55038	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55035	Analizada	Baja (3.3)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55034	Analizada	Alta (8.7)	0.95%	—	Microsoft Sharepoint Server	14/7/2026	15/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55033	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032	Analizada	Alta (7.8)	0.57%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2019 Microsoft Office 2021+3	14/7/2026	16/7/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55030	Analizada	Media (5.4)	0.58%	—	Microsoft Sharepoint Server	14/7/2026	15/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55028	Analizada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft 365 Microsoft Office 2016 Microsoft Office 2019+3	14/7/2026	16/7/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.