Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

159 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-65816	Analizada	Crítica (10)	0.97%	—	Microsoft Azure WEB Apps	20/8/2026	24/8/2026	Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-5108	Aplazada	Media (4.4)	0.31%	—	Super Progressive WEB Apps^AI	5/8/2026	12/8/2026	The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and including, 2.2.43. This is due to insufficient input sanitization and output escaping. The offline message value is stored without…
CVE-2026-32211	Analizada	Alta (7.5)	1.00%	—	Microsoft Azure WEB Apps	3/4/2026	24/7/2026	Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-3962	Aplazada	Baja (2.1)	0.47%	—	Jcharis Machine-learning-web-apps^AI Pocoo Jinja2^AI	11/3/2026	17/6/2026	A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5. The impacted element is the function render_template of the file Machine-Learning-Web-Apps-master/Build-n-Deploy-Flask-App-with-Waypoint/app/app.py of the component Jinja2 Template Handler. Such…
CVE-2023-48277	Aplazada	Media (4.3)	0.61%	—	Super Progressive WEB Apps^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.
CVE-2024-38194	Analizada	Crítica (9.9)	1.3%	—	Microsoft Azure WEB Apps	10/9/2024	10/8/2026	An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
CVE-2023-23399	Modificada	Alta (7.8)	2.5%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	14/3/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-23396	Modificada	Media (6.5)	3.8%	💥 PoC	Microsoft Office Online Server Microsoft Office WEB Apps Server	14/3/2023	17/6/2026	Microsoft Excel Denial of Service Vulnerability
CVE-2023-21716	Modificada	Crítica (9.8)	85%	💥 PoC	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server Microsoft Office WEB Apps+4	14/2/2023	19/8/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41106	Modificada	Alta (8.8)	2.4%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	9/11/2022	10/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41103	Modificada	Media (5.5)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Information Disclosure Vulnerability
CVE-2022-41063	Modificada	Alta (7.8)	0.82%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	9/11/2022	10/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41061	Modificada	Alta (7.8)	1.2%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41060	Modificada	Media (5.5)	0.79%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Information Disclosure Vulnerability
CVE-2022-30173	Modificada	Alta (7.8)	2.3%	—	Microsoft Excel Microsoft Office WEB Apps Server	15/6/2022	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-30172	Modificada	Media (5.5)	2.7%	—	Microsoft Office Online Server Microsoft Office WEB Apps Server Microsoft Sharepoint Server	15/6/2022	17/6/2026	Microsoft Office Information Disclosure Vulnerability
CVE-2022-30171	Modificada	Media (5.5)	2.6%	—	Microsoft Office Online Server Microsoft Office WEB Apps Server Microsoft Sharepoint Server	15/6/2022	17/6/2026	Microsoft Office Information Disclosure Vulnerability
CVE-2022-30159	Modificada	Media (5.5)	2.7%	—	Microsoft Office Online Server Microsoft Office WEB Apps Server Microsoft Sharepoint Server	15/6/2022	17/6/2026	Microsoft Office Information Disclosure Vulnerability
CVE-2022-29110	Modificada	Alta (7.8)	3.8%	—	Microsoft Excel Microsoft Office WEB Apps Server	10/5/2022	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-26901	Modificada	Alta (7.8)	2.5%	—	Microsoft 365 Apps Microsoft Excel Microsoft Excel RT Microsoft Office+3	15/4/2022	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-22716	Modificada	Media (5.5)	4.6%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+3	9/2/2022	17/6/2026	Microsoft Excel Information Disclosure Vulnerability
CVE-2022-21840	Modificada	Alta (8.8)	3.1%	—	Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+3	11/1/2022	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2021-43256	Modificada	Alta (7.8)	2.1%	—	Microsoft 365 Apps Microsoft Excel Microsoft Excel RT Microsoft Office+3	15/12/2021	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40442	Modificada	Alta (7.8)	2.3%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+3	10/11/2021	19/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40486	Modificada	Alta (7.8)	6.0%	—	Microsoft Office Microsoft Office Online Server Microsoft Office WEB Apps Server Microsoft Sharepoint Enterprise Server+2	13/10/2021	17/6/2026	Microsoft Word Remote Code Execution Vulnerability