Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-62819
Critical
N/D
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
11/08/2026
CVE-2026-62819
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62819
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62819
Critical
KB5120249
5120249
11/08/2026
CVE-2026-62819
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62819
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62819
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62819
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62819
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62819
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62819
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62819
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62819
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62820
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62820
Critical
N/D
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62820
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62820
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62820
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62820
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62820
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62822
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62822
Critical
N/D
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
11/08/2026
CVE-2026-62822
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62822
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62822
Critical
KB5120249
5120249
11/08/2026
CVE-2026-62822
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62822
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62822
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62822
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62822
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62822
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62822
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62822
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62822
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62823
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62823
Critical
N/D
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62823
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62823
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62823
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62823
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62823
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62823
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62823
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62824
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62824
Critical
N/D
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.
11/08/2026
CVE-2026-62824
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62824
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62827
Critical
N/D
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order. I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?
Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability. How could an attacker exploit the vulnerability?
An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.
11/08/2026
CVE-2026-62830
Critical
N/D
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-62834
Critical
N/D
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
428
Visitas totales
167
Visitantes únicos