Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-68160
Critical
N/D
N/D
11/08/2026
CVE-2026-68166
Critical
N/D
N/D
11/08/2026
CVE-2026-68176
Critical
N/D
N/D
11/08/2026
CVE-2026-68180
Critical
N/D
N/D
11/08/2026
CVE-2026-68185
Critical
N/D
N/D
11/08/2026
CVE-2026-68198
Critical
N/D
N/D
11/08/2026
CVE-2026-68207
Critical
N/D
N/D
11/08/2026
CVE-2026-68210
Critical
N/D
N/D
11/08/2026
CVE-2026-68212
Critical
N/D
N/D
11/08/2026
CVE-2026-68214
Critical
N/D
N/D
11/08/2026
CVE-2026-68218
Critical
N/D
N/D
11/08/2026
CVE-2026-68236
Critical
N/D
N/D
11/08/2026
CVE-2026-68287
Critical
N/D
N/D
11/08/2026
CVE-2026-68310
Critical
N/D
N/D
11/08/2026
CVE-2026-68324
Critical
N/D
N/D
11/08/2026
CVE-2026-68325
Critical
N/D
N/D
11/08/2026
CVE-2026-68340
Critical
N/D
N/D
11/08/2026
CVE-2026-68349
Critical
N/D
N/D
11/08/2026
CVE-2026-68354
Critical
N/D
N/D
11/08/2026
CVE-2026-68357
Critical
N/D
N/D
11/08/2026
CVE-2026-68359
Critical
N/D
N/D
11/08/2026
CVE-2026-68360
Critical
N/D
N/D
11/08/2026
CVE-2026-68364
Critical
N/D
N/D
11/08/2026
CVE-2026-68377
Critical
N/D
N/D
11/08/2026
CVE-2026-68391
Critical
N/D
N/D
11/08/2026
CVE-2026-68395
Critical
N/D
N/D
11/08/2026
CVE-2026-68399
Critical
N/D
N/D
11/08/2026
CVE-2026-68402
Critical
N/D
N/D
11/08/2026
CVE-2026-68406
Critical
N/D
N/D
11/08/2026
CVE-2026-68407
Critical
N/D
N/D
11/08/2026
CVE-2026-68782
Critical
N/D
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-68789
Critical
N/D
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-68794
Critical
N/D
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
11/08/2026
CVE-2026-68804
Critical
N/D
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
11/08/2026
CVE-2026-68816
Critical
N/D
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
11/08/2026
CVE-2026-68823
Critical
N/D
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69400
Critical
N/D
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69419
Critical
N/D
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69502
Critical
N/D
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69519
Critical
N/D
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69543
Critical
N/D
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69555
Critical
N/D
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69558
Critical
N/D
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69836
Critical
N/D
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69851
Critical
N/D
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-69855
Critical
N/D
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-70130
Critical
N/D
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
11/08/2026
CVE-2026-70332
Critical
N/D
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
11/08/2026
CVE-2026-70452
Critical
N/D
N/D
11/08/2026
CVE-2026-70460
Critical
N/D
N/D
11/08/2026
421
Visitas totales
165
Visitantes únicos