CVE-2026-109463
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS
8.8
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-502
Ainda não há histórico EPSS suficiente.
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1242296.6 MÉD—
——0Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.4hCVE-2026-1233908.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1200007.5 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1141518.8 ALT—
——0Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.3hCVE-2026-1100448.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1094728.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4h