Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior

Críticas / altas1305▼ 185 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-27746	Analizada	Alta (7.8)	0.86%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+1	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27745	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	8/4/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26642	Analizada	Alta (7.8)	0.80%	—	Microsoft 365 Apps Microsoft Access Microsoft Excel Microsoft Office+3	8/4/2025	17/6/2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26630	Analizada	Alta (7.8)	0.97%	—	Microsoft 365 Apps Microsoft Access Microsoft Office Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-26629	Analizada	Alta (7.8)	0.58%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24083	Analizada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24082	Analizada	Alta (7.8)	0.71%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/3/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24081	Analizada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/3/2025	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24080	Analizada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24079	Analizada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	11/3/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24078	Analizada	Alta (7)	0.57%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	11/3/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24077	Analizada	Alta (7.8)	0.59%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24075	Analizada	Alta (7.8)	0.69%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/3/2025	17/6/2026	Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24057	Analizada	Alta (7.8)	0.97%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/3/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-21397	Analizada	Alta (7.8)	0.78%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	11/2/2025	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21394	Analizada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/2/2025	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21392	Analizada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/2/2025	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21390	Analizada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/2/2025	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21387	Analizada	Alta (7.8)	0.94%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/2/2025	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21386	Analizada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/2/2025	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21383	Analizada	Media (5.5)	1.0%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	11/2/2025	17/6/2026	Microsoft Excel Information Disclosure Vulnerability
CVE-2025-21381	Analizada	Alta (7.8)	1.1%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	11/2/2025	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-23634	Aplazada	Alta (7.1)	0.23%	—	Codehandling Youmax-channel-embeds-for-youtube-businesses^AI	23/1/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Reflected XSS.This issue affects Youtube Video Grid: from n/a through <= 1.9.
CVE-2025-21402	Analizada	Alta (7.8)	0.65%	—	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Onenote	14/1/2025	17/6/2026	Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-21395	Analizada	Alta (7.8)	1.0%	—	Microsoft 365 Apps Microsoft Access Microsoft Office Microsoft Office Long Term Servicing Channel	14/1/2025	17/6/2026	Microsoft Access Remote Code Execution Vulnerability