Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-73023
Critical
KB5124012
5124012
08/09/2026
CVE-2026-73023
Critical
KB5123099
5123099
08/09/2026
CVE-2026-73023
Critical
KB5123065
5123065
08/09/2026
CVE-2026-73023
Critical
KB5123066
5123066
08/09/2026
CVE-2026-77493
Critical
KB5122876
5122876
08/09/2026
CVE-2026-77493
Critical
N/D
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by crafting a malicious RTF file. If a user opens the file or it is rendered in the preview pane, the attacker could execute arbitrary code in the user's context.
08/09/2026
CVE-2026-77493
Critical
KB5122882
5122882
08/09/2026
CVE-2026-77493
Critical
KB5122878
5122878
08/09/2026
CVE-2026-77493
Critical
KB5122871
5122871
08/09/2026
CVE-2026-77493
Critical
KB5124008
5124008
08/09/2026
CVE-2026-77493
Critical
KB5122880
5122880
08/09/2026
CVE-2026-77493
Critical
KB5124012
5124012
08/09/2026
CVE-2026-77493
Critical
KB5123099
5123099
08/09/2026
CVE-2026-77493
Critical
KB5123065
5123065
08/09/2026
CVE-2026-77493
Critical
KB5123066
5123066
08/09/2026
CVE-2026-77495
Critical
KB5122876
5122876
08/09/2026
CVE-2026-77495
Critical
N/D
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-77495
Critical
KB5122882
5122882
08/09/2026
CVE-2026-77495
Critical
KB5122878
5122878
08/09/2026
CVE-2026-77495
Critical
KB5122871
5122871
08/09/2026
CVE-2026-77495
Critical
KB5124008
5124008
08/09/2026
CVE-2026-77495
Critical
KB5122880
5122880
08/09/2026
CVE-2026-77495
Critical
KB5124012
5124012
08/09/2026
CVE-2026-77495
Critical
KB5123099
5123099
08/09/2026
CVE-2026-77495
Critical
KB5123065
5123065
08/09/2026
CVE-2026-77495
Critical
KB5123066
5123066
08/09/2026
CVE-2026-77504
Critical
KB5122876
5122876
08/09/2026
CVE-2026-77504
Critical
N/D
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-77504
Critical
KB5122882
5122882
08/09/2026
CVE-2026-77504
Critical
KB5122878
5122878
08/09/2026
CVE-2026-77504
Critical
KB5122871
5122871
08/09/2026
CVE-2026-77504
Critical
KB5124008
5124008
08/09/2026
CVE-2026-77504
Critical
KB5122880
5122880
08/09/2026
CVE-2026-77504
Critical
KB5124012
5124012
08/09/2026
CVE-2026-77504
Critical
KB5123099
5123099
08/09/2026
CVE-2026-77504
Critical
KB5123065
5123065
08/09/2026
CVE-2026-77504
Critical
KB5123066
5123066
08/09/2026
CVE-2026-77505
Critical
KB5122876
5122876
08/09/2026
CVE-2026-77505
Critical
N/D
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition. How could an attacker exploit this vulnerability?
An unauthenticated attacker could send DNS queries to a Windows DNS Server that is configured with a server-level DNS plug-in, attempting to win a timing-dependent race condition in the server's record-handling logic. Successful exploitation could allow the attacker to execute code on the DNS server with SYSTEM privileges. Network access is required; authentication and user interaction are not required.
08/09/2026
CVE-2026-77505
Critical
KB5122882
5122882
08/09/2026
CVE-2026-77505
Critical
KB5122871
5122871
08/09/2026
CVE-2026-77505
Critical
KB5123099
5123099
08/09/2026
CVE-2026-77505
Critical
KB5123065
5123065
08/09/2026
CVE-2026-77505
Critical
KB5123066
5123066
08/09/2026
CVE-2026-77898
Critical
N/D
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.
08/09/2026
CVE-2026-78439
Critical
N/D
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
08/09/2026
CVE-2026-78444
Critical
KB5122876
5122876
08/09/2026
CVE-2026-78444
Critical
N/D
5122871
08/09/2026
CVE-2026-78444
Critical
KB5122882
5122882
08/09/2026
CVE-2026-78444
Critical
KB5122871
5122871
08/09/2026
