Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2783▼ 434 respecto a la semana anterior
Críticas / altas1335▼ 118 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
736 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 20% | — | Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server | 10/6/2025 | 17/6/2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7) | 1.3% | — | Microsoft Sharepoint Server | 13/5/2025 | 17/6/2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (7.8) | 2.5% | — | Microsoft Sharepoint Server | 13/5/2025 | 17/6/2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (7) | 1.4% | — | Microsoft Sharepoint Server | 13/5/2025 | 17/6/2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (7.8) | 0.61% | — | Microsoft Sharepoint Server | 13/5/2025 | 17/6/2026 | Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.77% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Sharepoint Enterprise Server | 8/4/2025 | 17/6/2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (8.8) | 5.1% | — | Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server | 8/4/2025 | 17/6/2026 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7.2) | 24% | — | Microsoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server | 8/4/2025 | 17/6/2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7.8) | 0.82% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Sharepoint Enterprise Server+2 | 8/4/2025 | 17/6/2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (7.8) | 0.86% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Office Online Server+1 | 8/4/2025 | 17/6/2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (7.8) | 0.80% | — | Microsoft 365 AppsMicrosoft AccessMicrosoft ExcelMicrosoft Office+3 | 8/4/2025 | 17/6/2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | |
| Analizada | Alta (8) | 34% | — | Microsoft Sharepoint Server | 11/2/2025 | 17/6/2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| Analizada | Media (6.3) | 1.1% | — | Microsoft Sharepoint Server | 14/1/2025 | 17/6/2026 | Microsoft SharePoint Server Spoofing Vulnerability | |
| Analizada | Alta (7.2) | 1.8% | — | Microsoft Sharepoint Server | 14/1/2025 | 17/6/2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| Analizada | Alta (7.8) | 0.84% | — | Microsoft Sharepoint Server | 14/1/2025 | 17/6/2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| Analizada | Alta (7.4) | 2.3% | — | Microsoft Sharepoint Server | 12/12/2024 | 17/6/2026 | Microsoft SharePoint Remote Code Execution Vulnerability | |
| Analizada | Alta (8.2) | 1.6% | — | Microsoft Sharepoint Server | 12/12/2024 | 17/6/2026 | Microsoft SharePoint Elevation of Privilege Vulnerability | |
| Analizada | Media (5.5) | 1.1% | — | Microsoft 365 AppsMicrosoft OfficeMicrosoft Office Long Term Servicing ChannelMicrosoft Sharepoint Server+1 | 12/12/2024 | 17/6/2026 | Microsoft Office Remote Code Execution Vulnerability | |
| Analizada | Media (6.5) | 2.5% | — | Microsoft Sharepoint Server | 12/12/2024 | 17/6/2026 | Microsoft SharePoint Information Disclosure Vulnerability | |
| Analizada | Media (6.5) | 3.2% | — | Microsoft Sharepoint Server | 12/12/2024 | 17/6/2026 | Microsoft SharePoint Information Disclosure Vulnerability | |
| Analizada | Alta (8.1) | 2.4% | — | Zohocorp Manageengine Sharepoint Manager Plus | 8/11/2024 | 17/6/2026 | Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option. | |
| Analizada | Alta (7.8) | 0.65% | — | Microsoft Sharepoint Server | 8/10/2024 | 17/6/2026 | Microsoft SharePoint Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.5) | 4.5% | — | Microsoft Sharepoint Server | 10/9/2024 | 17/6/2026 | Microsoft SharePoint Server Denial of Service Vulnerability | |
| Analizada | Alta (7.2) | 36% | — | Microsoft Sharepoint Server | 10/9/2024 | 17/6/2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| Analizada | Alta (7.2) | 4.2% | — | Microsoft Sharepoint Server | 10/9/2024 | 17/6/2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability |