Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-71331
Critical
KB5120238
5120238
11/08/2026
CVE-2026-71331
Critical
N/D
5120228
11/08/2026
CVE-2026-71331
Critical
KB5120242
5120242
11/08/2026
CVE-2026-71331
Critical
KB5120229
5120229
11/08/2026
CVE-2026-71331
Critical
KB5120233
5120233
11/08/2026
CVE-2026-71331
Critical
KB5120228
5120228
11/08/2026
CVE-2026-74345
Critical
N/D
N/D
11/08/2026
CVE-2026-80607
Critical
N/D
N/D
11/08/2026
CVE-2026-80616
Critical
N/D
N/D
11/08/2026
CVE-2026-80637
Critical
N/D
N/D
11/08/2026
CVE-2026-80650
Critical
N/D
N/D
11/08/2026
CVE-2026-80653
Critical
N/D
N/D
11/08/2026
CVE-2026-80654
Critical
N/D
N/D
11/08/2026
CVE-2026-80681
Critical
N/D
N/D
11/08/2026
CVE-2026-80686
Critical
N/D
N/D
11/08/2026
CVE-2026-80694
Critical
N/D
N/D
11/08/2026
CVE-2026-80698
Critical
N/D
N/D
11/08/2026
CVE-2026-80709
Critical
N/D
N/D
11/08/2026
CVE-2026-80715
Critical
N/D
N/D
11/08/2026
CVE-2026-80721
Critical
N/D
N/D
11/08/2026
CVE-2026-11564
Critical
N/D
N/D
14/07/2026
CVE-2026-15043
Critical
N/D
N/D
14/07/2026
CVE-2026-26145
Critical
N/D
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-35425
Critical
N/D
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-38968
Critical
N/D
N/D
14/07/2026
CVE-2026-41106
Critical
N/D
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-42533
Critical
N/D
N/D
14/07/2026
CVE-2026-42982
Critical
KB5099538
5099538
14/07/2026
CVE-2026-42982
Critical
N/D
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
14/07/2026
CVE-2026-42982
Critical
KB5099540
5099540
14/07/2026
CVE-2026-42982
Critical
KB5099539
5099539
14/07/2026
CVE-2026-42982
Critical
KB5099536
5099536
14/07/2026
CVE-2026-42982
Critical
KB5101650
5101650
14/07/2026
CVE-2026-42982
Critical
KB5099414
5099414
14/07/2026
CVE-2026-42982
Critical
KB5101649
5101649
14/07/2026
CVE-2026-42982
Critical
KB5095051
5095051
14/07/2026
CVE-2026-42982
Critical
KB5099535
5099535
14/07/2026
CVE-2026-45499
Critical
N/D
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-48144
Critical
N/D
N/D
14/07/2026
CVE-2026-48561
Critical
N/D
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to execute code on the Hyper-V host execution environment. How could an attacker exploit this vulnerability?
An attacker could host a malicious website that causes Microsoft Edge for Android to automatically send crafted prompts to Copilot on a user’s device when the user visits the site. Because the affected component processes these requests without confirmation or origin checks, the prompts may be executed without the user’s awareness, potentially resulting in unintended actions within Copilot such as accessing or modifying data.
14/07/2026
CVE-2026-48564
Critical
KB5099538
5099538
14/07/2026
CVE-2026-48564
Critical
N/D
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An authenticated attacker could leverage a specially crafted RPC call to the DHCP service to exploit this vulnerability.
14/07/2026
CVE-2026-48564
Critical
KB5099540
5099540
14/07/2026
CVE-2026-48564
Critical
KB5099536
5099536
14/07/2026
CVE-2026-48564
Critical
KB5099535
5099535
14/07/2026
CVE-2026-48564
Critical
KB5094042
5094042
14/07/2026
CVE-2026-48564
Critical
KB5094041
5094041
14/07/2026
CVE-2026-49159
Critical
N/D
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-49164
Critical
KB5099538
5099538
14/07/2026
CVE-2026-49164
Critical
N/D
5099444
14/07/2026
422
Visitas totales
165
Visitantes únicos