Habla con un experto
MENÚPosicionamiento SEO
Soluciones
Certificados SSL
Infraestructura
Por qué CmaginetExperienciaBlogAuditoría SEO gratuitaEscaneo de vulnerabilidadesVulnerabilidades conocidasHabla con un experto

DIRECTORIO CVE · 2026

Vulnerabilidades de Microsoft Office

613 registros, ordenados por fecha oficial de publicación descendente.

Mostrando 100 registros · Página 5 de 7

Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-55016: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5561.1001; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20175; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20434

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-54988: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5561.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-54131: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215; Office Online Server: 16.0.0.0 hasta 16.0.10417.20175

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-54108: CWE-73: vulnerabilidad de seguridad en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-73: vulnerabilidad de seguridad» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5561.1001; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20175; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20434

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-50678: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5561.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-50675: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5561.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-50665: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5561.1000; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Crítica

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-50522: CWE-502: Deserialización de datos no confiables en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-502: Deserialización de datos no confiables» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5561.1001; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20175; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20434

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-50467: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5561.1000; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-50408: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5561.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft Office 365 for Mac / Microsoft Office for Android / Microsoft Office LTSC for Mac 2021

CVE-2026-50387: CWE-121: vulnerabilidad de seguridad en Microsoft Office 365 for Mac / Microsoft Office for Android / Microsoft Office LTSC for Mac 2021

El registro oficial identifica la vulnerabilidad «CWE-121: vulnerabilidad de seguridad» en Microsoft Office 365 for Mac / Microsoft Office for Android / Microsoft Office LTSC for Mac 2021. Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office for Android: 16.0.1 hasta 16.0.20228.20042; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215; Windows 10 Version 1607: 10.0.14393.0 hasta 10.0.14393.9339; Windows 10 Version 1809: 10.0.17763.0 hasta 10.0.17763.9020; Windows 10 Version 21H2: 10.0.19044.0 hasta 10.0.19044.7548; Windows 10 Version 22H2: 10.0.19045.0 hasta 10.0.19045.7548

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-50314: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5561.1000; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-50301: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5561.1000; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-48580: CWE-822: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-822: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5561.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-47642: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.111.26071215; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.111.26071215; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.111.26071215; Office Online Server: 16.0.0.0 hasta 16.0.10417.20175

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-47290: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5561.1000; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases

Leer análisis
Sin clasificar

Microsoft Office · Linux

CVE-2026-53343: vulnerabilidad de seguridad en Linux

El registro oficial identifica la vulnerabilidad «vulnerabilidad de seguridad» en Linux. Linux: 8fe148d39c127de3fb78dfa6da95a3608dfda454 hasta c0b8c148a7754826156993ed6442d31536ec86b4, ef21187c0672a2b2cbec44f33bab9ec47d5c277c hasta c2e3aadc8fef7da068490597fc5582f8f362aeb2, c86d26b4b089ca294b3b7d915a7da61edb77935f hasta c74990828d3c486ee44aaa68240eb3abff289d1c, 44e9a3bb76e5f2eecd374c8176b2c5163c8bb2e2 hasta 517720913bd3c17a52cd55a740064f68455ab88e, 44e9a3bb76e5f2eecd374c8176b2c5163c8bb2e2 hasta 2a4dc9a0ac3326e79fb58fdaae724b92127709a9, 44e9a3bb76e5f2eecd374c8176b2c5163c8bb2e2 hasta 77a1f6883dc6e837bb2cb30b9b02e2f94338e2c6; Linux: 6.13, 0 hasta 6.13, 6.1.176 hasta 6.1.*, 6.6.143 hasta 6.6.*, 6.12.94 hasta 6.12.*, 6.18.36 hasta 6.18.*

Leer análisis
Sin clasificar

Microsoft Office · Linux

CVE-2026-53282: vulnerabilidad de seguridad en Linux

El registro oficial identifica la vulnerabilidad «vulnerabilidad de seguridad» en Linux. Linux: 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e hasta b0bd7a850e1f082560959707dbf57b0402071646, 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e hasta 7dba9631faa2ee0785e8c2bf0e3d90a05f26dd8c, 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e hasta 786a45757dcdf8f2beb9d4a6db605db16c18b2b4; Linux: 6.14, 0 hasta 6.14, 6.18.33 hasta 6.18.*, 7.0.10 hasta 7.0.*, 7.1 hasta *

Leer análisis
Alta

Microsoft Office · Linux

CVE-2026-53173: vulnerabilidad de seguridad en Linux

El registro oficial identifica la vulnerabilidad «vulnerabilidad de seguridad» en Linux. Linux: 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b hasta db6cb3e35cebf487f9a78ebd4cfa4b83708ff40d, 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b hasta c0837b9cf6eabbad8b8cbddaff1a46a6d0a2e29d; Linux: 6.19, 0 hasta 6.19, 7.0.13 hasta 7.0.*, 7.1 hasta *

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-48562: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-48560: CWE-502: Deserialización de datos no confiables en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-502: Deserialización de datos no confiables» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47641: CWE-20: vulnerabilidad de seguridad en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-20: vulnerabilidad de seguridad» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47640: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47639: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47638: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47637: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47636: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47634: CWE-74: vulnerabilidad de seguridad en Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-74: vulnerabilidad de seguridad» en Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47298: CWE-285: vulnerabilidad de seguridad en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-285: vulnerabilidad de seguridad» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office LTSC 2021

CVE-2026-47293: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office LTSC 2021

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office LTSC 2021. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases

Leer análisis
Alta

Microsoft Office · Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

CVE-2026-45649: CWE-284: vulnerabilidad de seguridad en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

El registro oficial identifica la vulnerabilidad «CWE-284: vulnerabilidad de seguridad» en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android. Microsoft Excel for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft PowerPoint for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft Word for Android: 16.0.0.0 hasta 16.0.20131.20024

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45645: CWE-822: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-822: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021

CVE-2026-45643: CWE-822: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021

El registro oficial identifica la vulnerabilidad «CWE-822: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021

CVE-2026-45486: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Baja

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45485: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45484: CWE-502: Deserialización de datos no confiables en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-502: Deserialización de datos no confiables» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45483: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45481: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45479: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45475: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45474: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office for Android: 16.0.1 hasta 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45472: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office for Android: 16.0.1 hasta 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-45471: CWE-822: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-822: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317; Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-45469: CWE-191: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-191: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45468: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45467: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Baja

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021

CVE-2026-45466: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45465: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45464: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45463: CWE-191: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-191: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office for Android: 16.0.1 hasta 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45462: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-45461: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office for Android: 16.0.1 hasta 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-45460: CWE-126: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-126: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office for Android: 16.0.1 hasta 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Baja

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2024

CVE-2026-45459: CWE-693: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2024

El registro oficial identifica la vulnerabilidad «CWE-693: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2024. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-45458: CWE-416: Uso de memoria después de liberarla (Use After Free) en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-416: Uso de memoria después de liberarla (Use After Free)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317; Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021

CVE-2026-45457: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC for Mac 2021. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

CVE-2026-45456: CWE-843: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac

El registro oficial identifica la vulnerabilidad «CWE-843: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Office 2019 / Microsoft Office 365 for Mac. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317; Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005

Leer análisis
Baja

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-45455: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45454: CWE-22: Limitación incorrecta de una ruta a un directorio restringido (Path Traversal) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-22: Limitación incorrecta de una ruta a un directorio restringido (Path Traversal)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45453: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-44824: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-44823: CWE-197: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-197: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-44822: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Media

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-44821: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-44820: CWE-125: Lectura fuera de límites (Out-of-bounds Read) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-125: Lectura fuera de límites (Out-of-bounds Read)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

CVE-2026-44819: CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow) en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-122: Desbordamiento de búfer en memoria dinámica (Heap-based Buffer Overflow)» en Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-44818: CWE-362: Ejecución concurrente con sincronización incorrecta (Race Condition) en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-362: Ejecución concurrente con sincronización incorrecta (Race Condition)» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

CVE-2026-44817: CWE-843: vulnerabilidad de seguridad en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019

El registro oficial identifica la vulnerabilidad «CWE-843: vulnerabilidad de seguridad» en Microsoft 365 Apps for Enterprise / Microsoft Excel 2016 / Microsoft Office 2019. Microsoft 365 Apps for Enterprise: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 hasta 16.0.5556.1001; Microsoft Office 2019: 19.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 hasta 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 hasta https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 hasta 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 hasta 16.110.26061317

Leer análisis
Alta

Microsoft Office · Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

CVE-2026-44812: CWE-190: vulnerabilidad de seguridad en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

El registro oficial identifica la vulnerabilidad «CWE-190: vulnerabilidad de seguridad» en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android. Microsoft Excel for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft PowerPoint for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft Word for Android: 16.0.0.0 hasta 16.0.20131.20024; Windows 10 Version 1607: 10.0.14393.0 hasta 10.0.14393.9234; Windows 10 Version 1809: 10.0.17763.0 hasta 10.0.17763.8880; Windows 10 Version 21H2: 10.0.19044.0 hasta 10.0.19044.7417; Windows 10 Version 22H2: 10.0.19045.0 hasta 10.0.19045.7417; Windows 11 version 23H2: 10.0.22631.0 hasta 10.0.22631.7219

Leer análisis
Alta

Microsoft Office · Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

CVE-2026-44803: CWE-190: vulnerabilidad de seguridad en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android

El registro oficial identifica la vulnerabilidad «CWE-190: vulnerabilidad de seguridad» en Microsoft Excel for Android / Microsoft PowerPoint for Android / Microsoft Word for Android. Microsoft Excel for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft PowerPoint for Android: 16.0.0.0 hasta 16.0.20131.20024; Microsoft Word for Android: 16.0.0.0 hasta 16.0.20131.20024; Windows 10 Version 1607: 10.0.14393.0 hasta 10.0.14393.9234; Windows 10 Version 1809: 10.0.17763.0 hasta 10.0.17763.8880; Windows 10 Version 21H2: 10.0.19044.0 hasta 10.0.19044.7417; Windows 10 Version 22H2: 10.0.19045.0 hasta 10.0.19045.7417; Windows 11 version 23H2: 10.0.22631.0 hasta 10.0.22631.7219

Leer análisis
Media

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-33113: CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting) en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-79: Neutralización incorrecta de entrada durante la generación de páginas web (Cross-Site Scripting)» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20384

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-47294: CWE-78: vulnerabilidad de seguridad en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-78: vulnerabilidad de seguridad» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5552.1002; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20128; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20280

Leer análisis
Sin clasificar

Microsoft Office · Linux

CVE-2026-45893: vulnerabilidad de seguridad en Linux

El registro oficial identifica la vulnerabilidad «vulnerabilidad de seguridad» en Linux. Linux: e6e8bf418850d7958311a96ccfb594f2bcc8313e hasta 47e351dfef60ab0e3285133556e1a9c7f646a969, e6e8bf418850d7958311a96ccfb594f2bcc8313e hasta e027999049c493fb728ead5a90db76942181a935, e6e8bf418850d7958311a96ccfb594f2bcc8313e hasta 226c3b10aab23f73b03c47e7773107de56ba3a4e, e6e8bf418850d7958311a96ccfb594f2bcc8313e hasta 6fc367bfd4c8886e6b1742aabbd1c0bdc310db3a; Linux: 4.11, 0 hasta 4.11, 6.12.75 hasta 6.12.*, 6.18.14 hasta 6.18.*, 6.19.4 hasta 6.19.*, 7.0 hasta *

Leer análisis
Alta

Microsoft Office · Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

CVE-2026-45659: CWE-502: Deserialización de datos no confiables en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition

El registro oficial identifica la vulnerabilidad «CWE-502: Deserialización de datos no confiables» en Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition. Microsoft SharePoint Enterprise Server 2016: 16.0.0 hasta 16.0.5552.1002; Microsoft SharePoint Server 2019: 16.0.0 hasta 16.0.10417.20128; Microsoft SharePoint Server Subscription Edition: 16.0.0 hasta 16.0.19725.20280

Leer análisis