• Mié. Oct 28th, 2026

CVE Database

Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.

 

CVE Riesgo KB asociado Descripcion del KB Fecha de liberacion
CVE-2026-73023 Critical KB5124012 5124012 08/09/2026
CVE-2026-73023 Critical KB5123099 5123099 08/09/2026
CVE-2026-73023 Critical KB5123065 5123065 08/09/2026
CVE-2026-73023 Critical KB5123066 5123066 08/09/2026
CVE-2026-77493 Critical KB5122876 5122876 08/09/2026
CVE-2026-77493 Critical N/D Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? An unauthenticated attacker could exploit this vulnerability by crafting a malicious RTF file. If a user opens the file or it is rendered in the preview pane, the attacker could execute arbitrary code in the user's context. 08/09/2026
CVE-2026-77493 Critical KB5122882 5122882 08/09/2026
CVE-2026-77493 Critical KB5122878 5122878 08/09/2026
CVE-2026-77493 Critical KB5122871 5122871 08/09/2026
CVE-2026-77493 Critical KB5124008 5124008 08/09/2026
CVE-2026-77493 Critical KB5122880 5122880 08/09/2026
CVE-2026-77493 Critical KB5124012 5124012 08/09/2026
CVE-2026-77493 Critical KB5123099 5123099 08/09/2026
CVE-2026-77493 Critical KB5123065 5123065 08/09/2026
CVE-2026-77493 Critical KB5123066 5123066 08/09/2026
CVE-2026-77495 Critical KB5122876 5122876 08/09/2026
CVE-2026-77495 Critical N/D Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution? This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution. 08/09/2026
CVE-2026-77495 Critical KB5122882 5122882 08/09/2026
CVE-2026-77495 Critical KB5122878 5122878 08/09/2026
CVE-2026-77495 Critical KB5122871 5122871 08/09/2026
CVE-2026-77495 Critical KB5124008 5124008 08/09/2026
CVE-2026-77495 Critical KB5122880 5122880 08/09/2026
CVE-2026-77495 Critical KB5124012 5124012 08/09/2026
CVE-2026-77495 Critical KB5123099 5123099 08/09/2026
CVE-2026-77495 Critical KB5123065 5123065 08/09/2026
CVE-2026-77495 Critical KB5123066 5123066 08/09/2026
CVE-2026-77504 Critical KB5122876 5122876 08/09/2026
CVE-2026-77504 Critical N/D Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution? This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution. 08/09/2026
CVE-2026-77504 Critical KB5122882 5122882 08/09/2026
CVE-2026-77504 Critical KB5122878 5122878 08/09/2026
CVE-2026-77504 Critical KB5122871 5122871 08/09/2026
CVE-2026-77504 Critical KB5124008 5124008 08/09/2026
CVE-2026-77504 Critical KB5122880 5122880 08/09/2026
CVE-2026-77504 Critical KB5124012 5124012 08/09/2026
CVE-2026-77504 Critical KB5123099 5123099 08/09/2026
CVE-2026-77504 Critical KB5123065 5123065 08/09/2026
CVE-2026-77504 Critical KB5123066 5123066 08/09/2026
CVE-2026-77505 Critical KB5122876 5122876 08/09/2026
CVE-2026-77505 Critical N/D Use after free in DNS Server allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. How could an attacker exploit this vulnerability? An unauthenticated attacker could send DNS queries to a Windows DNS Server that is configured with a server-level DNS plug-in, attempting to win a timing-dependent race condition in the server's record-handling logic. Successful exploitation could allow the attacker to execute code on the DNS server with SYSTEM privileges. Network access is required; authentication and user interaction are not required. 08/09/2026
CVE-2026-77505 Critical KB5122882 5122882 08/09/2026
CVE-2026-77505 Critical KB5122871 5122871 08/09/2026
CVE-2026-77505 Critical KB5123099 5123099 08/09/2026
CVE-2026-77505 Critical KB5123065 5123065 08/09/2026
CVE-2026-77505 Critical KB5123066 5123066 08/09/2026
CVE-2026-77898 Critical N/D Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Is the Preview Pane an attack vector for this vulnerability? Yes, the Preview Pane is an attack vector. Are the updates for the Microsoft Office LTSC for Mac currently available? The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures. 08/09/2026
CVE-2026-78439 Critical N/D Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution? This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution. Are the updates for the Microsoft Office LTSC for Mac currently available? The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. 08/09/2026
CVE-2026-78444 Critical KB5122876 5122876 08/09/2026
CVE-2026-78444 Critical N/D 5122871 08/09/2026
CVE-2026-78444 Critical KB5122882 5122882 08/09/2026
CVE-2026-78444 Critical KB5122871 5122871 08/09/2026

432 Visitas totales
168 Visitantes únicos