CVE-2026-109463
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS
8.8
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-502
Sin historial EPSS suficiente todavía.
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1242296.6 MED—
——0Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.4hCVE-2026-1233908.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1200007.5 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1141518.8 ALT—
——0Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.3hCVE-2026-1100448.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1094728.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4h