Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-49163
Critical
N/D
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-50481
Critical
N/D
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
11/08/2026
CVE-2026-50515
Critical
N/D
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-50516
Critical
N/D
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-50540
Critical
N/D
N/D
11/08/2026
CVE-2026-52490
Critical
N/D
N/D
11/08/2026
CVE-2026-53791
Critical
N/D
N/D
11/08/2026
CVE-2026-56161
Critical
N/D
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-56162
Critical
N/D
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-59115
Critical
N/D
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-59118
Critical
N/D
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-62815
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62815
Critical
N/D
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62815
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62815
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62815
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62815
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62815
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62815
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62815
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62816
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62816
Critical
N/D
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62816
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62816
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62816
Critical
KB5120249
5120249
11/08/2026
CVE-2026-62816
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62816
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62816
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62816
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62816
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62816
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62816
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62816
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62816
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62817
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62817
Critical
N/D
5120228
11/08/2026
CVE-2026-62817
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62817
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62817
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62817
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62818
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62818
Critical
N/D
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.
11/08/2026
CVE-2026-62818
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62818
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62818
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62818
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62818
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62818
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62818
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62819
Critical
KB5120238
5120238
11/08/2026
430
Visitas totales
168
Visitantes únicos