Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior

Críticas / altas1372▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

259 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-54905	Analizada	Alta (7.1)	0.63%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	9/9/2025	17/6/2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53736	Analizada	Media (6.2)	0.50%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	12/8/2025	17/6/2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53733	Analizada	Alta (8.4)	0.55%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	12/8/2025	17/6/2026	Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49706	Analizada	Media (6.5)	99%	⚠ Explotación activa	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	8/7/2025	4/8/2026	Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-47994	Analizada	Alta (8.6)	3.0%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/7/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47172	Analizada	Alta (8.8)	1.7%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	10/6/2025	17/6/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47169	Analizada	Alta (7.8)	0.65%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47168	Analizada	Alta (7.8)	0.64%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	10/6/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47166	Analizada	Alta (8.8)	21%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	10/6/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47163	Analizada	Alta (8.8)	20%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	10/6/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29820	Analizada	Alta (7.8)	0.77%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29794	Analizada	Alta (8.8)	5.1%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	8/4/2025	17/6/2026	Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29793	Analizada	Alta (7.2)	24%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	8/4/2025	17/6/2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-27747	Analizada	Alta (7.8)	0.82%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Sharepoint Enterprise Server+2	8/4/2025	17/6/2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2023-38177	Modificada	Media (6.8)	3.4%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	14/11/2023	17/6/2026	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24955	Analizada	Alta (7.2)	85%	⚠ Explotación activa	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	9/5/2023	17/6/2026	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24954	Modificada	Media (6.5)	1.8%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 20h2+10	9/5/2023	17/6/2026	Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-24950	Modificada	Media (6.5)	67%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	9/5/2023	17/6/2026	Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-21717	Modificada	Alta (8.8)	1.1%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Foundation Microsoft Sharepoint Server	14/2/2023	19/8/2026	Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-21716	Modificada	Crítica (9.8)	85%	—	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server Microsoft Office WEB Apps+4	14/2/2023	19/8/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2022-44693	Modificada	Alta (8.8)	2.0%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Foundation Microsoft Sharepoint Server	13/12/2022	17/6/2026	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41122	Modificada	Media (6.5)	1.6%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Foundation Microsoft Sharepoint Server	9/11/2022	10/8/2026	Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41103	Modificada	Media (5.5)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Information Disclosure Vulnerability
CVE-2022-41062	Modificada	Alta (8.8)	1.6%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Foundation Microsoft Sharepoint Server	9/11/2022	10/8/2026	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41061	Modificada	Alta (7.8)	1.2%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Remote Code Execution Vulnerability