Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-50392
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50444
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50444
Critical
N/D
5099444
14/07/2026
CVE-2026-50444
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50444
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50444
Critical
KB5099535
5099535
14/07/2026
CVE-2026-50444
Critical
KB5099445
5099445
14/07/2026
CVE-2026-50444
Critical
KB5099444
5099444
14/07/2026
CVE-2026-50467
Critical
N/D
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability. According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector.
14/07/2026
CVE-2026-50474
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50474
Critical
N/D
5099444
14/07/2026
CVE-2026-50474
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50474
Critical
KB5099539
5099539
14/07/2026
CVE-2026-50474
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50474
Critical
KB5101650
5101650
14/07/2026
CVE-2026-50474
Critical
KB5101649
5101649
14/07/2026
CVE-2026-50474
Critical
KB5099535
5099535
14/07/2026
CVE-2026-50474
Critical
KB5099445
5099445
14/07/2026
CVE-2026-50474
Critical
KB5099444
5099444
14/07/2026
CVE-2026-50517
Critical
N/D
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-50518
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50518
Critical
N/D
5099444
14/07/2026
CVE-2026-50518
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50518
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50518
Critical
KB5099535
5099535
14/07/2026
CVE-2026-50518
Critical
KB5099445
5099445
14/07/2026
CVE-2026-50518
Critical
KB5099444
5099444
14/07/2026
CVE-2026-50522
Critical
N/D
5002882
14/07/2026
CVE-2026-50655
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50655
Critical
N/D
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.
14/07/2026
CVE-2026-50655
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50655
Critical
KB5099539
5099539
14/07/2026
CVE-2026-50655
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50655
Critical
KB5101650
5101650
14/07/2026
CVE-2026-50655
Critical
KB5101649
5101649
14/07/2026
CVE-2026-50655
Critical
KB5099535
5099535
14/07/2026
CVE-2026-50680
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50680
Critical
N/D
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
14/07/2026
CVE-2026-50680
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50680
Critical
KB5099539
5099539
14/07/2026
CVE-2026-50680
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50680
Critical
KB5101650
5101650
14/07/2026
CVE-2026-50680
Critical
KB5101649
5101649
14/07/2026
CVE-2026-50694
Critical
KB5099538
5099538
14/07/2026
CVE-2026-50694
Critical
N/D
5099444
14/07/2026
CVE-2026-50694
Critical
KB5099540
5099540
14/07/2026
CVE-2026-50694
Critical
KB5099539
5099539
14/07/2026
CVE-2026-50694
Critical
KB5099536
5099536
14/07/2026
CVE-2026-50694
Critical
KB5101650
5101650
14/07/2026
CVE-2026-50694
Critical
KB5101649
5101649
14/07/2026
419
Visitas totales
164
Visitantes únicos