Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
–

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.0%—Microsoft 365 Copilot Chat7/5/202617/6/2026
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
ModificadaAlta (7.5)1.0%—Microsoft 365 Copilot Chat7/5/202617/6/2026
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
ModificadaCrítica (9.9)0.72%—Microsoft 365 Copilot Chat19/3/202617/6/2026
Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.
ModificadaCrítica (9.3)0.57%—Microsoft 365 Copilot Chat9/10/202517/6/2026
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
ModificadaCrítica (9.3)0.57%—Microsoft 365 Copilot Chat9/10/202517/6/2026
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.
AnalizadaAlta (7.5)0.71%—Microsoft 365 Copilot Chat7/8/202517/6/2026
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
AnalizadaAlta (7.5)0.61%—Microsoft 365 Copilot Chat7/8/202517/6/2026
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability