Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-65791
Critical
KB5120228
5120228
11/08/2026
CVE-2026-65791
Critical
KB5120418
5120418
11/08/2026
CVE-2026-65791
Critical
KB5120386
5120386
11/08/2026
CVE-2026-65791
Critical
KB5120385
5120385
11/08/2026
CVE-2026-65796
Critical
KB5120238
5120238
11/08/2026
CVE-2026-65796
Critical
N/D
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
11/08/2026
CVE-2026-65796
Critical
KB5120242
5120242
11/08/2026
CVE-2026-65796
Critical
KB5120229
5120229
11/08/2026
CVE-2026-65796
Critical
KB5120233
5120233
11/08/2026
CVE-2026-65796
Critical
KB5120228
5120228
11/08/2026
CVE-2026-65796
Critical
KB5120418
5120418
11/08/2026
CVE-2026-65796
Critical
KB5120386
5120386
11/08/2026
CVE-2026-65796
Critical
KB5120385
5120385
11/08/2026
CVE-2026-65801
Critical
N/D
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-65816
Critical
N/D
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-66309
Critical
N/D
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-66799
Critical
KB5120238
5120238
11/08/2026
CVE-2026-66799
Critical
N/D
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
11/08/2026
CVE-2026-66799
Critical
KB5120242
5120242
11/08/2026
CVE-2026-66799
Critical
KB5120229
5120229
11/08/2026
CVE-2026-66799
Critical
KB5123303
5123303
11/08/2026
CVE-2026-66799
Critical
KB5120249
5120249
11/08/2026
CVE-2026-66799
Critical
KB5120233
5120233
11/08/2026
CVE-2026-66799
Critical
KB5120228
5120228
11/08/2026
CVE-2026-66799
Critical
KB5121003
5121003
11/08/2026
CVE-2026-66799
Critical
KB5120994
5120994
11/08/2026
CVE-2026-66799
Critical
KB5120240
5120240
11/08/2026
CVE-2026-66799
Critical
KB5121000
5121000
11/08/2026
CVE-2026-66799
Critical
KB5120418
5120418
11/08/2026
CVE-2026-66799
Critical
KB5120386
5120386
11/08/2026
CVE-2026-66799
Critical
KB5120385
5120385
11/08/2026
CVE-2026-66800
Critical
N/D
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-66802
Critical
KB5120238
5120238
11/08/2026
CVE-2026-66802
Critical
N/D
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition. How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
11/08/2026
CVE-2026-66802
Critical
KB5120242
5120242
11/08/2026
CVE-2026-66802
Critical
KB5120229
5120229
11/08/2026
CVE-2026-66802
Critical
KB5120233
5120233
11/08/2026
CVE-2026-66802
Critical
KB5120228
5120228
11/08/2026
CVE-2026-66802
Critical
KB5121000
5121000
11/08/2026
CVE-2026-66807
Critical
N/D
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector.
11/08/2026
CVE-2026-68121
Critical
N/D
N/D
11/08/2026
CVE-2026-68127
Critical
N/D
N/D
11/08/2026
CVE-2026-68131
Critical
N/D
N/D
11/08/2026
CVE-2026-68132
Critical
N/D
N/D
11/08/2026
CVE-2026-68140
Critical
N/D
N/D
11/08/2026
CVE-2026-68142
Critical
N/D
N/D
11/08/2026
CVE-2026-68143
Critical
N/D
N/D
11/08/2026
CVE-2026-68144
Critical
N/D
N/D
11/08/2026
CVE-2026-68146
Critical
N/D
N/D
11/08/2026
CVE-2026-68153
Critical
N/D
N/D
11/08/2026
424
Visitas totales
166
Visitantes únicos