Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-40358
Critical
N/D
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.
12/05/2026
CVE-2026-40361
Critical
N/D
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Why is Microsoft Word listed in the Security Updates table but the title indicates that Outlook is affected?
This vulnerability can be exploited when rendering email in Outlook (classic). The rendering of email in Outlook (classic) uses Microsoft Word functionality. The vulnerability is in the Word functionality and is exploitable through Outlook (classic). Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.
12/05/2026
CVE-2026-40363
Critical
N/D
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
12/05/2026
CVE-2026-40364
Critical
N/D
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.
12/05/2026
CVE-2026-40365
Critical
N/D
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges. How could an attacker exploit the vulnerability?
In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server. I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?
Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.
12/05/2026
CVE-2026-40366
Critical
N/D
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
12/05/2026
CVE-2026-40367
Critical
N/D
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. Is the Attachment Preview Pane an attack vector for this vulnerability?
Yes. The attachment Preview Pane that is accessed when a user clicks to preview an attached file is an attack vector; however, the email Preview Pane itself is not. There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.
12/05/2026
CVE-2026-40379
Critical
N/D
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-40402
Critical
KB5087545
5087545
12/05/2026
CVE-2026-40402
Critical
N/D
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges. Under what circumstances might this vulnerability be exploited other than as a denial of service attack against a Hyper-V host?
This issue allows a guest VM to force the Hyper-V host's kernel to read from an arbitrary, potentially invalid address. The contents of the address read would not be returned to the guest VM. In most circumstances, this would result in a denial of service of the Hyper-V host (bugcheck) due to reading an unmapped address. It is possible to read from a memory mapped device register corresponding to a hardware device attached to the Hyper-V host which may trigger additional, hardware device specific side effects that could compromise the Hyper-V host's security. According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to gain access to the Hyper-V host environment.
12/05/2026
CVE-2026-40402
Critical
KB5087424
5087424
12/05/2026
CVE-2026-40402
Critical
KB5087420
5087420
12/05/2026
CVE-2026-40402
Critical
KB5093998
5093998
12/05/2026
CVE-2026-40403
Critical
KB5087538
5087538
12/05/2026
CVE-2026-40403
Critical
N/D
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
This vulnerability could lead to a contained execution environment escape. Please refer to AppContainer Isolation for more information. According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
The vulnerable endpoint is only available over the local VM interface as all external communication is blocked. This means an attacker needs to execute code from the local machine to exploit the vulnerability. According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges. How could an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by getting access to the local guest VM so they can attack the Host OS.
12/05/2026
CVE-2026-40403
Critical
KB5087545
5087545
12/05/2026
CVE-2026-40403
Critical
KB5087424
5087424
12/05/2026
CVE-2026-40403
Critical
KB5087544
5087544
12/05/2026
CVE-2026-40403
Critical
KB5094127
5094127
12/05/2026
CVE-2026-40403
Critical
KB5087539
5087539
12/05/2026
CVE-2026-40403
Critical
KB5087423
5087423
12/05/2026
CVE-2026-40403
Critical
KB5089549
5089549
12/05/2026
CVE-2026-40403
Critical
KB5089466
5089466
12/05/2026
CVE-2026-40403
Critical
KB5087420
5087420
12/05/2026
CVE-2026-40403
Critical
KB5093998
5093998
12/05/2026
CVE-2026-40403
Critical
KB5087541
5087541
12/05/2026
CVE-2026-40403
Critical
KB5089548
5089548
12/05/2026
CVE-2026-40403
Critical
KB5087537
5087537
12/05/2026
CVE-2026-40403
Critical
KB5087470
5087470
12/05/2026
CVE-2026-40403
Critical
KB5087471
5087471
12/05/2026
CVE-2026-40411
Critical
N/D
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-40412
Critical
N/D
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-41089
Critical
KB5087538
5087538
12/05/2026
CVE-2026-41089
Critical
N/D
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An attacker could send a specially crafted network request to a Windows server that is acting as a domain controller. If successful, this could cause the Netlogon service to improperly handle the request, potentially allowing the attacker to run code on the affected system without needing to sign in or have prior access.
12/05/2026
CVE-2026-41089
Critical
KB5087545
5087545
12/05/2026
CVE-2026-41089
Critical
KB5087424
5087424
12/05/2026
CVE-2026-41089
Critical
KB5087539
5087539
12/05/2026
CVE-2026-41089
Critical
KB5087423
5087423
12/05/2026
CVE-2026-41089
Critical
KB5087541
5087541
12/05/2026
CVE-2026-41089
Critical
KB5087537
5087537
12/05/2026
CVE-2026-41089
Critical
KB5087470
5087470
12/05/2026
CVE-2026-41089
Critical
KB5087471
5087471
12/05/2026
CVE-2026-41090
Critical
N/D
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
12/05/2026
CVE-2026-41096
Critical
KB5087539
5087539
12/05/2026
CVE-2026-41096
Critical
N/D
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. How could an attacker exploit the vulnerability?
An attacker could exploit this vulnerability by sending a specially crafted DNS response to a vulnerable Windows system, causing the DNS Client to incorrectly process the response and corrupt memory. In certain configurations, this could allow the attacker to run code remotely on the affected system without authentication.
12/05/2026
CVE-2026-41096
Critical
KB5087423
5087423
12/05/2026
CVE-2026-41096
Critical
KB5089549
5089549
12/05/2026
CVE-2026-41096
Critical
KB5089466
5089466
12/05/2026
CVE-2026-41096
Critical
KB5087420
5087420
12/05/2026
CVE-2026-41096
Critical
KB5093998
5093998
12/05/2026
403
Visitas totales
162
Visitantes únicos