Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-69846
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69846
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69846
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69846
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69846
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69846
Critical
KB5123099
5123099
08/09/2026
CVE-2026-69852
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69852
Critical
N/D
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.
08/09/2026
CVE-2026-69852
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69852
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69852
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69852
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69852
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69852
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69852
Critical
KB5123099
5123099
08/09/2026
CVE-2026-69852
Critical
KB5123065
5123065
08/09/2026
CVE-2026-69852
Critical
KB5123066
5123066
08/09/2026
CVE-2026-69854
Critical
N/D
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network. According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?
An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation. How could an attacker exploit this vulnerability?
An unauthenticated attacker could use an identity token issued by a tenant they control to sign in to an affected multi-tenant application. Successful exploitation could give the attacker an authenticated session and access to protected resources and operations in the target application. No user interaction is required. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain an authenticated session in an affected application from an unauthorized tenant. The attacker could then access protected data and perform actions available to authenticated users in the target application.
08/09/2026
CVE-2026-69857
Critical
N/D
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-69858
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69858
Critical
N/D
5122871
08/09/2026
CVE-2026-69858
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69860
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69860
Critical
N/D
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-69860
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69860
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69860
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69860
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69860
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69860
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69860
Critical
KB5123099
5123099
08/09/2026
CVE-2026-69860
Critical
KB5123065
5123065
08/09/2026
CVE-2026-69860
Critical
KB5123066
5123066
08/09/2026
CVE-2026-69864
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69864
Critical
N/D
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
08/09/2026
CVE-2026-69864
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69864
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69864
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69874
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69874
Critical
N/D
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
08/09/2026
CVE-2026-69874
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69874
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69874
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69874
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69874
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69874
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69890
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69890
Critical
N/D
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.
08/09/2026
CVE-2026-69890
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69890
Critical
KB5122878
5122878
08/09/2026
401
Visitas totales
162
Visitantes únicos