Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2983▼ 79 respecto a la semana anterior
Críticas / altas1412▲ 62 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (10) | 0.90% | — | Microsoft Exchange Online | 20/8/2026 | 24/8/2026 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network. | |
| Analizada | Crítica (10) | 0.90% | — | Microsoft Exchange Online | 24/7/2026 | 29/7/2026 | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network. | |
| Analizada | Alta (8.8) | 0.78% | 💥 PoC | Microsoft Exchange Online | 2/7/2026 | 7/7/2026 | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Crítica (9.6) | 0.69% | — | Microsoft Exchange Online | 19/6/2026 | 24/6/2026 | Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (7.5) | 1.00% | — | Microsoft Exchange Online | 4/6/2026 | 23/7/2026 | Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. |