Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-58599
Critical
N/D
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. How can I check if the update is installed?
You can check the package version in PowerShell:
Get-AppxPackage -Name Microsoft.HEVCVideoExtension*
08/09/2026
CVE-2026-62906
Critical
N/D
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-62916
Critical
N/D
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-65669
Critical
N/D
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network. How could an attacker exploit this vulnerability?
An attacker could convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. Successful exploitation could bypass intended read-only restrictions and allow database data to be accessed or modified using the connected user's permissions. User interaction is required.
08/09/2026
CVE-2026-65772
Critical
N/D
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
08/09/2026
CVE-2026-65818
Critical
N/D
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-66302
Critical
N/D
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability over the network by sending a specially crafted request that writes an attacker-controlled file to an arbitrary location on the affected server. Successful exploitation could result in the attacker executing code on the target server. No authentication or user interaction is required.
08/09/2026
CVE-2026-67378
Critical
N/D
5122768
08/09/2026
CVE-2026-67631
Critical
N/D
5122772
08/09/2026
CVE-2026-67636
Critical
N/D
5122769
08/09/2026
CVE-2026-67643
Critical
N/D
5122769
08/09/2026
CVE-2026-69285
Critical
N/D
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-69499
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69499
Critical
N/D
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-69499
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69499
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69499
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69499
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69499
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69499
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69499
Critical
KB5123099
5123099
08/09/2026
CVE-2026-69499
Critical
KB5123065
5123065
08/09/2026
CVE-2026-69499
Critical
KB5123066
5123066
08/09/2026
CVE-2026-69501
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69501
Critical
N/D
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation requires the target system to be under sustained low-memory (memory pressure) conditions, which are not commonly present in normal operation. This makes the vulnerability difficult to reliably trigger, as the attacker must first induce or wait for a constrained memory state before exploitation becomes possible. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
08/09/2026
CVE-2026-69501
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69501
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69501
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69501
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69501
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69518
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69518
Critical
N/D
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An attacker could join a Remote Desktop sharing session and send specially crafted clipboard data to the sharing host. Successful exploitation could allow the attacker to execute code on the host system. User interaction is required to initiate or participate in the sharing session.
08/09/2026
CVE-2026-69518
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69518
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69518
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69518
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69518
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69518
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69518
Critical
KB5123099
5123099
08/09/2026
CVE-2026-69518
Critical
KB5123065
5123065
08/09/2026
CVE-2026-69518
Critical
KB5123066
5123066
08/09/2026
CVE-2026-69530
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69530
Critical
N/D
5122871
08/09/2026
CVE-2026-69530
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69530
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69579
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69579
Critical
N/D
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
08/09/2026
CVE-2026-69579
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69579
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69579
Critical
KB5122871
5122871
08/09/2026
402
Visitas totales
162
Visitantes únicos