Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2721▲ 17 respecto a la semana anterior

Críticas / altas1459▲ 351 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)72▼ 458 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-97222	Pendiente de análisis	Media (5.5)	0.12%	—	Gnumeric^AI	25/9/2026	30/9/2026	A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference a freed sheet-object component, causing Gnumeric to crash.
CVE-2013-6836	Modificada	Media (4.3)	1.7%	—	Gnome Gnumeric	19/12/2013	17/6/2026	Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a crafted xls file with a crafted length value.
CVE-2009-0318	Modificada	Media (6.9)	0.39%	—	Gnome Gnumeric	28/1/2009	16/6/2026	Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
CVE-2008-0668	Modificada	Alta (9.3)	5.0%	—	Gnome Gnumeric	11/2/2008	16/6/2026	The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of…
CVE-1999-0719	Modificada	Media (4.6)	0.42%	—	Gnumeric	5/8/1999	16/6/2026	The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.