Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-57094
Critical
KB5099538
5099538
14/07/2026
CVE-2026-57094
Critical
N/D
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
14/07/2026
CVE-2026-57094
Critical
KB5099540
5099540
14/07/2026
CVE-2026-57094
Critical
KB5099539
5099539
14/07/2026
CVE-2026-57094
Critical
KB5099536
5099536
14/07/2026
CVE-2026-57094
Critical
KB5101650
5101650
14/07/2026
CVE-2026-57094
Critical
KB5101649
5101649
14/07/2026
CVE-2026-57094
Critical
KB5099535
5099535
14/07/2026
CVE-2026-57100
Critical
N/D
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-57106
Critical
N/D
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-57433
Critical
N/D
N/D
14/07/2026
CVE-2026-58275
Critical
N/D
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-58542
Critical
KB5099536
5099536
14/07/2026
CVE-2026-58542
Critical
N/D
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
14/07/2026
CVE-2026-58542
Critical
KB5101650
5101650
14/07/2026
CVE-2026-58542
Critical
KB5101649
5101649
14/07/2026
CVE-2026-58608
Critical
KB5099538
5099538
14/07/2026
CVE-2026-58608
Critical
N/D
5099444
14/07/2026
CVE-2026-58608
Critical
KB5099540
5099540
14/07/2026
CVE-2026-58608
Critical
KB5099539
5099539
14/07/2026
CVE-2026-58608
Critical
KB5099536
5099536
14/07/2026
CVE-2026-58608
Critical
KB5101650
5101650
14/07/2026
CVE-2026-58608
Critical
KB5101649
5101649
14/07/2026
CVE-2026-58608
Critical
KB5099535
5099535
14/07/2026
CVE-2026-58608
Critical
KB5099445
5099445
14/07/2026
CVE-2026-58608
Critical
KB5099444
5099444
14/07/2026
CVE-2026-58630
Critical
N/D
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-58644
Critical
N/D
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. How could an attacker exploit the vulnerability?
In a network-based attack, an attacker authenticated as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server. I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?
Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability. According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?
The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.
14/07/2026
CVE-2026-60082
Critical
N/D
N/D
14/07/2026
CVE-2026-62825
Critical
N/D
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-62835
Critical
N/D
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
CVE-2026-63800
Critical
N/D
N/D
14/07/2026
CVE-2026-63824
Critical
N/D
N/D
14/07/2026
CVE-2026-63827
Critical
N/D
N/D
14/07/2026
CVE-2026-63828
Critical
N/D
N/D
14/07/2026
CVE-2026-63833
Critical
N/D
N/D
14/07/2026
CVE-2026-63881
Critical
N/D
N/D
14/07/2026
CVE-2026-63882
Critical
N/D
N/D
14/07/2026
CVE-2026-63959
Critical
N/D
N/D
14/07/2026
CVE-2026-63974
Critical
N/D
N/D
14/07/2026
CVE-2026-63979
Critical
N/D
N/D
14/07/2026
CVE-2026-63983
Critical
N/D
N/D
14/07/2026
CVE-2026-63999
Critical
N/D
N/D
14/07/2026
CVE-2026-64017
Critical
N/D
N/D
14/07/2026
CVE-2026-64070
Critical
N/D
N/D
14/07/2026
CVE-2026-64076
Critical
N/D
N/D
14/07/2026
CVE-2026-64078
Critical
N/D
N/D
14/07/2026
CVE-2026-64079
Critical
N/D
N/D
14/07/2026
CVE-2026-64138
Critical
N/D
N/D
14/07/2026
CVE-2026-66803
Critical
N/D
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
14/07/2026
415
Visitas totales
164
Visitantes únicos