• Mar. Oct 27th, 2026

CVE Database

Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.

 

CVE Riesgo KB asociado Descripcion del KB Fecha de liberacion
CVE-2026-69676 Critical KB5122878 5122878 08/09/2026
CVE-2026-69676 Critical KB5122871 5122871 08/09/2026
CVE-2026-69676 Critical KB5124008 5124008 08/09/2026
CVE-2026-69676 Critical KB5122880 5122880 08/09/2026
CVE-2026-69676 Critical KB5124012 5124012 08/09/2026
CVE-2026-69676 Critical KB5123099 5123099 08/09/2026
CVE-2026-69676 Critical KB5123065 5123065 08/09/2026
CVE-2026-69676 Critical KB5123066 5123066 08/09/2026
CVE-2026-69678 Critical N/D Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? An attacker could send a specially crafted presentation to a user. The vulnerability could be exploited when the file is opened or rendered in a preview pane, potentially allowing the attacker to execute code in the user's context. Is the Preview Pane an attack vector for this vulnerability? Yes, the Preview Pane is an attack vector. Are the updates for the Microsoft Office LTSC for Mac currently available? The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. 08/09/2026
CVE-2026-69710 Critical KB5122878 5122878 08/09/2026
CVE-2026-69710 Critical N/D Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69710 Critical KB5124008 5124008 08/09/2026
CVE-2026-69710 Critical KB5122880 5122880 08/09/2026
CVE-2026-69710 Critical KB5124012 5124012 08/09/2026
CVE-2026-69712 Critical KB5122876 5122876 08/09/2026
CVE-2026-69712 Critical N/D Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. How could an attacker exploit this vulnerability? An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required. 08/09/2026
CVE-2026-69712 Critical KB5122882 5122882 08/09/2026
CVE-2026-69712 Critical KB5122871 5122871 08/09/2026
CVE-2026-69712 Critical KB5123099 5123099 08/09/2026
CVE-2026-69712 Critical KB5123065 5123065 08/09/2026
CVE-2026-69712 Critical KB5123066 5123066 08/09/2026
CVE-2026-69725 Critical KB5122878 5122878 08/09/2026
CVE-2026-69725 Critical N/D Double free in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69725 Critical KB5124008 5124008 08/09/2026
CVE-2026-69725 Critical KB5122880 5122880 08/09/2026
CVE-2026-69725 Critical KB5124012 5124012 08/09/2026
CVE-2026-69730 Critical KB5122876 5122876 08/09/2026
CVE-2026-69730 Critical N/D Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required. 08/09/2026
CVE-2026-69730 Critical KB5122882 5122882 08/09/2026
CVE-2026-69730 Critical KB5122871 5122871 08/09/2026
CVE-2026-69730 Critical KB5123099 5123099 08/09/2026
CVE-2026-69730 Critical KB5123065 5123065 08/09/2026
CVE-2026-69730 Critical KB5123066 5123066 08/09/2026
CVE-2026-69740 Critical KB5124008 5124008 08/09/2026
CVE-2026-69740 Critical N/D Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69740 Critical KB5122880 5122880 08/09/2026
CVE-2026-69740 Critical KB5124012 5124012 08/09/2026
CVE-2026-69767 Critical N/D Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution? This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution. Are the updates for the Microsoft Office LTSC for Mac currently available? The security update for Microsoft Office LTSC for Mac 2021 and 2024 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information. Is the Preview Pane an attack vector for this vulnerability? Yes, the Preview Pane is an attack vector. 08/09/2026
CVE-2026-69769 Critical KB5122876 5122876 08/09/2026
CVE-2026-69769 Critical N/D Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints. 08/09/2026
CVE-2026-69769 Critical KB5122882 5122882 08/09/2026
CVE-2026-69769 Critical KB5122878 5122878 08/09/2026
CVE-2026-69769 Critical KB5122871 5122871 08/09/2026
CVE-2026-69769 Critical KB5124008 5124008 08/09/2026
CVE-2026-69769 Critical KB5122880 5122880 08/09/2026
CVE-2026-69769 Critical KB5124012 5124012 08/09/2026
CVE-2026-69769 Critical KB5123099 5123099 08/09/2026
CVE-2026-69769 Critical KB5123065 5123065 08/09/2026
CVE-2026-69769 Critical KB5123066 5123066 08/09/2026
CVE-2026-69784 Critical KB5122878 5122878 08/09/2026

396 Visitas totales
162 Visitantes únicos