Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 480 respecto a la semana anterior

Críticas / altas1308▼ 182 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

237 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-1442	Modificada	Media (6.1)	1.7%	—	Microsoft Office Online Server Microsoft Office WEB Apps	14/7/2020	17/6/2026	A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
CVE-2020-1342	Modificada	Media (5.5)	6.4%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Online Server Microsoft Office WEB Apps+3	14/7/2020	17/6/2026	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
CVE-2020-0980	Modificada	Alta (7.8)	12%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Office WEB Apps+3	15/4/2020	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVE-2020-0892	Modificada	Alta (7.8)	12%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Office WEB Apps+4	12/3/2020	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.
CVE-2020-0852	Modificada	Alta (7.8)	12%	—	Microsoft Office Microsoft Office Online Server Microsoft Sharepoint Server	12/3/2020	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
CVE-2020-0850	Modificada	Alta (8.8)	8.8%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Sharepoint Enterprise Server+3	12/3/2020	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVE-2020-0695	Modificada	Media (5.4)	0.97%	—	Microsoft Office Online Server	11/2/2020	17/6/2026	A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.
CVE-2020-0647	Modificada	Media (5.4)	0.92%	—	Microsoft Office Online Server	14/1/2020	17/6/2026	A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
CVE-2019-1447	Modificada	Media (5.4)	0.80%	—	Microsoft Office Online Server	12/11/2019	17/6/2026	A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445.
CVE-2019-1446	Modificada	Media (5.5)	8.9%	—	Microsoft Excel Microsoft Office Microsoft Office 365 Microsoft Office Online Server+2	12/11/2019	17/6/2026	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
CVE-2019-1445	Modificada	Media (5.4)	0.80%	—	Microsoft Office Online Server	12/11/2019	17/6/2026	A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1447.
CVE-2019-1331	Modificada	Alta (8.8)	20%	—	Microsoft Excel Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server+1	10/10/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
CVE-2019-1205	Modificada	Crítica (9.8)	4.0%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Sharepoint Server	14/8/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on…
CVE-2019-1201	Modificada	Alta (7.8)	4.9%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Office WEB Apps+4	14/8/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on…
CVE-2019-1035	Modificada	Alta (7.8)	6.6%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Sharepoint Server	12/6/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take…
CVE-2019-1034	Modificada	Alta (7.8)	4.9%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Office WEB Apps+3	12/6/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take…
CVE-2019-0953	Modificada	Alta (7.8)	13%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Word	16/5/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVE-2019-0585	Modificada	Alta (8.8)	22%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Online Server Microsoft Office WEB Apps Server+4	8/1/2019	17/6/2026	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online…
CVE-2018-8628	Modificada	Alta (7.8)	16%	—	Microsoft Office Microsoft Office 365 Proplus Microsoft Office Compatibility Pack Microsoft Office Online Server+5	12/12/2018	17/6/2026	A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint…
CVE-2018-8247	Modificada	Media (5.4)	3.5%	—	Microsoft Office Online Server Microsoft Office WEB Apps	14/6/2018	17/6/2026	An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.
CVE-2018-0922	Modificada	Alta (7.8)	18%	—	Microsoft Office Microsoft Office Compatibility Pack Microsoft Office Online Server Microsoft Office WEB Apps+4	14/3/2018	17/6/2026	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft…
CVE-2018-0919	Modificada	Baja (3.3)	12%	—	Microsoft Office Microsoft Office Online Server Microsoft Office WEB Apps Microsoft Office WEB Apps Server+3	14/3/2018	17/6/2026	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2,…
CVE-2018-0797	Modificada	Alta (7.8)	25%	—	Microsoft Office Microsoft Office Compatibility Pack Microsoft Office Online Server Microsoft Office WEB Apps+5	10/1/2018	17/6/2026	Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".
CVE-2018-0792	Modificada	Alta (8.8)	28%	—	Microsoft Office Microsoft Office Online Server Microsoft Sharepoint Server Microsoft Word	10/1/2018	17/6/2026	Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.
CVE-2017-11826	Analizada	Alta (7.8)	81%	⚠ Explotación activa💥 PoC	Microsoft Office Compatibility Pack Microsoft Office Online Server Microsoft Office WEB Apps Server Microsoft Office Word Viewer+3	13/10/2017	17/6/2026	Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in…