Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-48574
Critical
KB5094123
5094123
09/06/2026
CVE-2026-48574
Critical
N/D
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
09/06/2026
CVE-2026-48574
Critical
KB5094128
5094128
09/06/2026
CVE-2026-48574
Critical
KB5094127
5094127
09/06/2026
CVE-2026-48574
Critical
KB5094125
5094125
09/06/2026
CVE-2026-48574
Critical
KB5094126
5094126
09/06/2026
CVE-2026-48574
Critical
KB5093998
5093998
09/06/2026
CVE-2026-48574
Critical
KB5095051
5095051
09/06/2026
CVE-2026-48574
Critical
KB5094122
5094122
09/06/2026
CVE-2026-48574
Critical
KB5094042
5094042
09/06/2026
CVE-2026-48574
Critical
KB5094041
5094041
09/06/2026
CVE-2026-48579
Critical
N/D
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
09/06/2026
CVE-2026-48582
Critical
N/D
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
09/06/2026
CVE-2026-48584
Critical
N/D
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
09/06/2026
CVE-2026-52913
Critical
N/D
N/D
09/06/2026
CVE-2026-52919
Critical
N/D
N/D
09/06/2026
CVE-2026-52922
Critical
N/D
N/D
09/06/2026
CVE-2026-52931
Critical
N/D
N/D
09/06/2026
CVE-2026-52934
Critical
N/D
N/D
09/06/2026
CVE-2026-52944
Critical
N/D
N/D
09/06/2026
CVE-2026-52947
Critical
N/D
N/D
09/06/2026
CVE-2026-52989
Critical
N/D
N/D
09/06/2026
CVE-2026-52991
Critical
N/D
N/D
09/06/2026
CVE-2026-52993
Critical
N/D
N/D
09/06/2026
CVE-2026-53000
Critical
N/D
N/D
09/06/2026
CVE-2026-53002
Critical
N/D
N/D
09/06/2026
CVE-2026-53009
Critical
N/D
N/D
09/06/2026
CVE-2026-53010
Critical
N/D
N/D
09/06/2026
CVE-2026-53017
Critical
N/D
N/D
09/06/2026
CVE-2026-53018
Critical
N/D
N/D
09/06/2026
CVE-2026-53025
Critical
N/D
N/D
09/06/2026
CVE-2026-53036
Critical
N/D
N/D
09/06/2026
CVE-2026-53043
Critical
N/D
N/D
09/06/2026
CVE-2026-53045
Critical
N/D
N/D
09/06/2026
CVE-2026-53049
Critical
N/D
N/D
09/06/2026
CVE-2026-53052
Critical
N/D
N/D
09/06/2026
CVE-2026-53053
Critical
N/D
N/D
09/06/2026
CVE-2026-53062
Critical
N/D
N/D
09/06/2026
CVE-2026-53075
Critical
N/D
N/D
09/06/2026
CVE-2026-53077
Critical
N/D
N/D
09/06/2026
CVE-2026-53086
Critical
N/D
N/D
09/06/2026
CVE-2026-53130
Critical
N/D
N/D
09/06/2026
CVE-2026-53309
Critical
N/D
N/D
09/06/2026
CVE-2026-54130
Critical
N/D
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
09/06/2026
CVE-2026-56123
Critical
N/D
N/D
09/06/2026
CVE-2025-71305
Critical
N/D
N/D
12/05/2026
CVE-2026-23652
Critical
N/D
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-23663
Critical
N/D
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-26129
Critical
N/D
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-26147
Critical
N/D
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
407
Visitas totales
162
Visitantes únicos