Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

367 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-42832	Analizada	Media (5.5)	0.31%	—	Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
CVE-2026-42831	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40421	Modificada	Media (4.3)	0.70%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-40420	Modificada	Alta (8.8)	0.30%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40419	Analizada	Alta (7.8)	0.33%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418	Modificada	Alta (7.8)	0.33%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40367	Modificada	Alta (8.4)	0.45%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Server+1	12/5/2026	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40366	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40364	Analizada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40363	Analizada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft 365 Copilot Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40362	Modificada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/5/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40361	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40360	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/5/2026	17/6/2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	12/5/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40358	Modificada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-35440	Analizada	Media (5.5)	0.55%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Word	12/5/2026	17/6/2026	Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-35436	Modificada	Alta (8.8)	0.30%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	12/5/2026	17/6/2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-33822	Analizada	Media (6.1)	0.46%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	14/4/2026	24/7/2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-33115	Analizada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	14/4/2026	24/7/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33114	Analizada	Alta (8.4)	0.36%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	14/4/2026	24/7/2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33095	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	14/4/2026	24/7/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-32200	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Powerpoint	14/4/2026	17/6/2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-32199	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	14/4/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32198	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	14/4/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32197	Analizada	Alta (7.8)	0.47%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	14/4/2026	17/6/2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.