Consulta vulnerabilidades CVE, conoce su impacto y verifica las medidas de corrección en fuentes oficiales.
CVE
Riesgo
KB asociado
Descripcion del KB
Fecha de liberacion
CVE-2026-69890
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69890
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69890
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69890
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69906
Critical
KB5122876
5122876
08/09/2026
CVE-2026-69906
Critical
N/D
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited the vulnerability could execute code in the kernel.
08/09/2026
CVE-2026-69906
Critical
KB5122882
5122882
08/09/2026
CVE-2026-69906
Critical
KB5122878
5122878
08/09/2026
CVE-2026-69906
Critical
KB5122871
5122871
08/09/2026
CVE-2026-69906
Critical
KB5124008
5124008
08/09/2026
CVE-2026-69906
Critical
KB5122880
5122880
08/09/2026
CVE-2026-69906
Critical
KB5124012
5124012
08/09/2026
CVE-2026-69906
Critical
KB5123099
5123099
08/09/2026
CVE-2026-70178
Critical
N/D
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-70203
Critical
KB5122876
5122876
08/09/2026
CVE-2026-70203
Critical
N/D
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker could attempt to exploit this vulnerability by convincing a user to open a specially crafted media file. If the vulnerable component processes the file, memory corruption could occur, which may allow code to run on the affected system.
08/09/2026
CVE-2026-70203
Critical
KB5122882
5122882
08/09/2026
CVE-2026-70203
Critical
KB5122878
5122878
08/09/2026
CVE-2026-70203
Critical
KB5122871
5122871
08/09/2026
CVE-2026-70203
Critical
KB5124008
5124008
08/09/2026
CVE-2026-70203
Critical
KB5122880
5122880
08/09/2026
CVE-2026-70203
Critical
KB5124012
5124012
08/09/2026
CVE-2026-70203
Critical
KB5123099
5123099
08/09/2026
CVE-2026-70203
Critical
KB5123065
5123065
08/09/2026
CVE-2026-70203
Critical
KB5123066
5123066
08/09/2026
CVE-2026-70296
Critical
KB5122876
5122876
08/09/2026
CVE-2026-70296
Critical
N/D
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by convincing a user to navigate to a folder containing a specially crafted RAW image file. The vulnerability can be triggered when Windows generates a thumbnail or preview; the user does not need to open the file. Successful exploitation could allow remote code execution.
08/09/2026
CVE-2026-70296
Critical
KB5122882
5122882
08/09/2026
CVE-2026-70296
Critical
KB5122878
5122878
08/09/2026
CVE-2026-70296
Critical
KB5122871
5122871
08/09/2026
CVE-2026-70296
Critical
KB5124008
5124008
08/09/2026
CVE-2026-70296
Critical
KB5122880
5122880
08/09/2026
CVE-2026-70296
Critical
KB5124012
5124012
08/09/2026
CVE-2026-70296
Critical
KB5123099
5123099
08/09/2026
CVE-2026-70296
Critical
KB5123065
5123065
08/09/2026
CVE-2026-70296
Critical
KB5123066
5123066
08/09/2026
CVE-2026-70351
Critical
N/D
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-70352
Critical
N/D
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?
This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.
08/09/2026
CVE-2026-70585
Critical
KB5122876
5122876
08/09/2026
CVE-2026-70585
Critical
N/D
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
08/09/2026
CVE-2026-70585
Critical
KB5122882
5122882
08/09/2026
CVE-2026-70585
Critical
KB5122871
5122871
08/09/2026
CVE-2026-70585
Critical
KB5123099
5123099
08/09/2026
CVE-2026-70585
Critical
KB5123065
5123065
08/09/2026
CVE-2026-70585
Critical
KB5123066
5123066
08/09/2026
CVE-2026-70586
Critical
KB5122876
5122876
08/09/2026
CVE-2026-70586
Critical
N/D
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
08/09/2026
CVE-2026-70586
Critical
KB5122882
5122882
08/09/2026
CVE-2026-70586
Critical
KB5122878
5122878
08/09/2026
CVE-2026-70586
Critical
KB5122871
5122871
08/09/2026
406
Visitas totales
162
Visitantes únicos