Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-62836
Critical
N/D
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-62869
Critical
N/D
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-62873
Critical
N/D
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-62878
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62878
Critical
N/D
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62878
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62878
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62878
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62878
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62878
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62878
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62878
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62889
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62889
Critical
N/D
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
11/08/2026
CVE-2026-62889
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62889
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62889
Critical
KB5120249
5120249
11/08/2026
CVE-2026-62889
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62889
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62889
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62889
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62889
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62889
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62889
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62889
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62889
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62890
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62890
Critical
N/D
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
11/08/2026
CVE-2026-62890
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62890
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62890
Critical
KB5120249
5120249
11/08/2026
CVE-2026-62890
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62890
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62890
Critical
KB5121003
5121003
11/08/2026
CVE-2026-62890
Critical
KB5120994
5120994
11/08/2026
CVE-2026-62890
Critical
KB5120240
5120240
11/08/2026
CVE-2026-62890
Critical
KB5121000
5121000
11/08/2026
CVE-2026-62890
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62890
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62890
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62893
Critical
KB5120238
5120238
11/08/2026
CVE-2026-62893
Critical
N/D
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-62893
Critical
KB5120242
5120242
11/08/2026
CVE-2026-62893
Critical
KB5120229
5120229
11/08/2026
CVE-2026-62893
Critical
KB5120233
5120233
11/08/2026
CVE-2026-62893
Critical
KB5120228
5120228
11/08/2026
CVE-2026-62893
Critical
KB5120418
5120418
11/08/2026
CVE-2026-62893
Critical
KB5120386
5120386
11/08/2026
CVE-2026-62893
Critical
KB5120385
5120385
11/08/2026
CVE-2026-62896
Critical
N/D
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
427
Visitas totales
167
Visitantes únicos