• Mar. Oct 27th, 2026

CVE Database

Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.

 

CVE Riesgo KB asociado Descripcion del KB Fecha de liberacion
CVE-2026-69784 Critical N/D Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69784 Critical KB5124008 5124008 08/09/2026
CVE-2026-69784 Critical KB5122880 5122880 08/09/2026
CVE-2026-69784 Critical KB5124012 5124012 08/09/2026
CVE-2026-69797 Critical N/D Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? An attacker could send a specially crafted presentation to a user. The vulnerability could be exploited when the file is opened or rendered in a preview pane, potentially allowing the attacker to execute code in the user's context. Is the Preview Pane an attack vector for this vulnerability? Yes, the Preview Pane is an attack vector. 08/09/2026
CVE-2026-69799 Critical KB5122878 5122878 08/09/2026
CVE-2026-69799 Critical N/D Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69799 Critical KB5124008 5124008 08/09/2026
CVE-2026-69799 Critical KB5122880 5122880 08/09/2026
CVE-2026-69799 Critical KB5124012 5124012 08/09/2026
CVE-2026-69813 Critical KB5122876 5122876 08/09/2026
CVE-2026-69813 Critical N/D Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. 08/09/2026
CVE-2026-69813 Critical KB5122882 5122882 08/09/2026
CVE-2026-69813 Critical KB5122871 5122871 08/09/2026
CVE-2026-69813 Critical KB5123099 5123099 08/09/2026
CVE-2026-69813 Critical KB5123065 5123065 08/09/2026
CVE-2026-69813 Critical KB5123066 5123066 08/09/2026
CVE-2026-69820 Critical KB5122878 5122878 08/09/2026
CVE-2026-69820 Critical N/D Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. 08/09/2026
CVE-2026-69820 Critical KB5124008 5124008 08/09/2026
CVE-2026-69820 Critical KB5122880 5122880 08/09/2026
CVE-2026-69820 Critical KB5124012 5124012 08/09/2026
CVE-2026-69827 Critical KB5122876 5122876 08/09/2026
CVE-2026-69827 Critical N/D Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition. How could an attacker exploit this vulnerability? Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints. 08/09/2026
CVE-2026-69827 Critical KB5122882 5122882 08/09/2026
CVE-2026-69827 Critical KB5122871 5122871 08/09/2026
CVE-2026-69827 Critical KB5123099 5123099 08/09/2026
CVE-2026-69827 Critical KB5123065 5123065 08/09/2026
CVE-2026-69827 Critical KB5123066 5123066 08/09/2026
CVE-2026-69829 Critical KB5122876 5122876 08/09/2026
CVE-2026-69829 Critical N/D Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints. 08/09/2026
CVE-2026-69829 Critical KB5122882 5122882 08/09/2026
CVE-2026-69829 Critical KB5122878 5122878 08/09/2026
CVE-2026-69829 Critical KB5122871 5122871 08/09/2026
CVE-2026-69829 Critical KB5124008 5124008 08/09/2026
CVE-2026-69829 Critical KB5122880 5122880 08/09/2026
CVE-2026-69829 Critical KB5124012 5124012 08/09/2026
CVE-2026-69829 Critical KB5123099 5123099 08/09/2026
CVE-2026-69829 Critical KB5123065 5123065 08/09/2026
CVE-2026-69829 Critical KB5123066 5123066 08/09/2026
CVE-2026-69845 Critical KB5122876 5122876 08/09/2026
CVE-2026-69845 Critical N/D Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability? Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints. 08/09/2026
CVE-2026-69845 Critical KB5122882 5122882 08/09/2026
CVE-2026-69845 Critical KB5122871 5122871 08/09/2026
CVE-2026-69845 Critical KB5123099 5123099 08/09/2026
CVE-2026-69845 Critical KB5123065 5123065 08/09/2026
CVE-2026-69845 Critical KB5123066 5123066 08/09/2026
CVE-2026-69846 Critical KB5122876 5122876 08/09/2026
CVE-2026-69846 Critical N/D Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges. How could an attacker exploit this vulnerability? An attacker who already has kernel-level access could exploit this vulnerability by submitting a specially crafted Code Integrity policy to an affected system. Successful exploitation could allow the attacker to execute code in Virtual Trust Level 1 (VTL1). 08/09/2026
CVE-2026-69846 Critical KB5122882 5122882 08/09/2026

400 Visitas totales
162 Visitantes únicos