Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-81355
Critical
KB5123099
5123099
08/09/2026
CVE-2026-81355
Critical
KB5123065
5123065
08/09/2026
CVE-2026-81355
Critical
KB5123066
5123066
08/09/2026
CVE-2026-81948
Critical
N/D
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-81949
Critical
N/D
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it.
08/09/2026
CVE-2026-81950
Critical
N/D
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-81951
Critical
N/D
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it.
08/09/2026
CVE-2026-81952
Critical
N/D
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by crafting a malicious RTF file. If a user opens the file or it is rendered in the preview pane, the attacker could execute arbitrary code in the user's context. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-81953
Critical
N/D
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-81955
Critical
N/D
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. How could an attacker exploit this vulnerability?
An attacker could send a specially crafted RTF file and convince a user to open it in Microsoft Word and save it as a filtered web page. Successful exploitation could allow the attacker to execute code in the user's context. Authentication is not required. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-81955
Critical
KB5122876
5122876
08/09/2026
CVE-2026-81955
Critical
KB5122882
5122882
08/09/2026
CVE-2026-81955
Critical
KB5122878
5122878
08/09/2026
CVE-2026-81955
Critical
KB5122871
5122871
08/09/2026
CVE-2026-81955
Critical
KB5124008
5124008
08/09/2026
CVE-2026-81955
Critical
KB5122880
5122880
08/09/2026
CVE-2026-81955
Critical
KB5124012
5124012
08/09/2026
CVE-2026-81955
Critical
KB5122874
5122874
08/09/2026
CVE-2026-81955
Critical
KB5123065
5123065
08/09/2026
CVE-2026-81955
Critical
KB5123066
5123066
08/09/2026
CVE-2026-81959
Critical
N/D
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Are the updates for the Microsoft Office LTSC for Mac currently available?
The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.
08/09/2026
CVE-2026-83498
Critical
KB5122871
5122871
08/09/2026
CVE-2026-83498
Critical
N/D
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. What privileges would an attacker gain by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could potentially leak data from the target enclave or execute code within the context of the target enclave.
08/09/2026
CVE-2026-83498
Critical
KB5124008
5124008
08/09/2026
CVE-2026-83498
Critical
KB5122880
5122880
08/09/2026
CVE-2026-83498
Critical
KB5124012
5124012
08/09/2026
CVE-2026-83501
Critical
KB5122871
5122871
08/09/2026
CVE-2026-83501
Critical
N/D
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could view Virtual Trust Level 1 (VTL1) data from Virtual Trust 0 (VTL0) which is the least privileged level.
08/09/2026
CVE-2026-83501
Critical
KB5124008
5124008
08/09/2026
CVE-2026-83501
Critical
KB5122880
5122880
08/09/2026
CVE-2026-83501
Critical
KB5124012
5124012
08/09/2026
CVE-2026-83711
Critical
N/D
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-83939
Critical
KB5124012
5124012
08/09/2026
CVE-2026-83939
Critical
N/D
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. How could an attacker exploit this vulnerability?
An attacker who already has kernel-level access could exploit this vulnerability by submitting a specially crafted Code Integrity policy to an affected system. Successful exploitation could allow the attacker to execute code in Virtual Trust Level 1 (VTL1). What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
08/09/2026
CVE-2026-83941
Critical
N/D
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-85504
Critical
N/D
N/D
08/09/2026
CVE-2026-85506
Critical
N/D
N/D
08/09/2026
CVE-2026-85507
Critical
N/D
N/D
08/09/2026
CVE-2026-85508
Critical
N/D
N/D
08/09/2026
CVE-2026-85509
Critical
N/D
N/D
08/09/2026
CVE-2026-85921
Critical
KB5129194
5129194
08/09/2026
CVE-2026-85921
Critical
N/D
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
08/09/2026
CVE-2026-89479
Critical
N/D
N/D
08/09/2026
CVE-2026-89526
Critical
N/D
N/D
08/09/2026
CVE-2026-89542
Critical
N/D
N/D
08/09/2026
CVE-2026-89551
Critical
N/D
N/D
08/09/2026
CVE-2026-89631
Critical
N/D
N/D
08/09/2026
CVE-2026-89653
Critical
N/D
N/D
08/09/2026
CVE-2026-24301
Critical
N/D
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-47243
Critical
N/D
N/D
11/08/2026
431
Visitas totales
168
Visitantes únicos