Login
Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday
14 October 2026 at 02:36
Normal view
Update Windows: Record Patch Tuesday fixes flaw already under attack
14 October 2026 at 07:26
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws.
Just when you thought a previous record would stand for a while, Microsoft comes out again with the largest monthly Patch Tuesday release. Microsoft has said its growing use of AI to find and fix security vulnerabilities means users should expect more fixes in its monthly updates.
How to apply patches and check if you’re protected
These updates fix security problems and help keep your Windows PC protected. Here’s how to make sure you’re up to date:
- Click the Start button, then open Settings.
- Select Windows Update (usually at the bottom of the menu on the left).
- Click Check for updates. Windows will search for the latest security updates. If you’ve enabled Get the latest updates as soon as they’re available under More options, you may be prompted to restart immediately to complete the update.
- Otherwise, continue to the next step.
- If updates are available, they’ll start downloading automatically. When they’re ready, click Install or Restart now if prompted. Your computer may need a restart to finish the update.
- After restarting, go back to Windows Update and check again. If it says You’re up to date, you’re all set.
Technical details
As usual, we’ve selected a few vulnerabilities to highlight for readers interested in the technical details.
We’ll start with the actively exploited vulnerability tracked as CVE-2026-96951 (CVSS score 8.8 out of 10), a Windows Shell security feature bypass vulnerability.
The security feature it can bypass is the Mark of the Web (MOTW) defense, which can warn users about potentially unsafe downloaded files.
Successful exploitation requires user interaction. For example, in an email or instant message attack, the attacker could send the targeted user a specially crafted file designed to exploit the vulnerability, but the user would have to click a link or open an attachment.
Another one to keep an eye on is CVE-2026-108398 (CVSS score 8.8 out of 10), where an untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. The bypassed feature is Windows Defender Application Control (WDAC), which could lead to the ability to run unauthorized applications on target systems. This vulnerability was publicly disclosed before the patch.
Another publicly disclosed vulnerability is CVE-2026-92707 (CVSS score 5.3 out of 10). The flaw can let an unauthenticated remote attacker exhaust memory in affected applications that process specially crafted MessagePack data. MessagePack-CSharp is a software component that helps applications pack and unpack data in a compact format, making it efficient to store or exchange information. Exposure depends on how a service uses the library to pack and unpack the information.
From reporting threats to removing them.
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.
Microsoft fixes record 964 flaws, including 2 exploited zero-days
9 September 2026 at 06:01
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record.
Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involve fixes that Microsoft applies itself, leaving 964 vulnerabilities that customers need to patch.
The release includes fixes for two actively exploited Windows zero-days. Both are local elevation-of-privilege vulnerabilities that could allow an attacker who already has access to a device to gain SYSTEM privileges. Neither provides remote access by itself, but SYSTEM-level access is valuable to malware operators after they gain an initial foothold through phishing, stolen credentials, or another method.
How to apply patches and check if you’re protected
These updates fix security problems and help keep your Windows PC protected. Here’s how to make sure you’re up to date:
- Click the Start button, then open Settings.
- Select Windows Update (usually at the bottom of the menu on the left).
- Click Check for updates. Windows will search for the latest security updates. If you’ve enabled Get the latest updates as soon as they’re available under More options, you may be prompted to restart immediately to complete the update. Otherwise, continue to the next step.
- If updates are available, they’ll start downloading automatically. When they’re ready, click Install or Restart now if prompted. Your computer may need a restart to finish the update.
- After restarting, go back to Windows Update and check again. If it says You’re up to date, you’re all set.
Technical details
The unusually large batch also includes high-severity remote-code-execution vulnerabilities in Windows DNS Server and Remote Desktop Services, as well as fixes affecting Exchange Server, SharePoint, SQL Server, Office, and core Windows components.
Let’s take a closer look at the two zero-day vulnerabilities. Microsoft classifies a vulnerability as a zero-day if it was publicly disclosed or actively exploited before an official fix became available.
The first is a Windows Update Stack elevation-of-privilege (EoP) vulnerability with a CVSS score of 7.8 out of 10, tracked as CVE-2026-81963. The description says:
“Improper link resolution before file access (‘link following’) in Windows Update Stack allows an authorized attacker to elevate privileges locally.”
This means Windows can be persuaded to open or modify the wrong file because it follows a shortcut-like pointer without properly checking where that pointer leads. Microsoft says attackers exploited the bug before a patch was available.
The second zero-day, tracked as CVE-2026-85880, also has a CVSS score of 7.8 out of 10. Microsoft describes it as:
“heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.”
Microsoft says an attacker who can execute code in a low-privilege AppContainer could exploit the vulnerability locally to escape the sandbox and elevate their privileges on the affected system. No additional user interaction is required.
Windows ALPC is an internal messaging system in the Windows operating system that allows different programs on the same computer to communicate with each other quickly.
A buffer overflow occurs when an area of memory within a software application reaches its boundary and data spills into an adjacent memory region. The heap is a region of memory used for dynamic memory allocation.
These are not the kinds of bugs a typical victim triggers merely by opening a malicious document or visiting a website. But local privilege escalation is a critical part of many attack chains: After malware runs with limited rights, a SYSTEM-level exploit can help an intruder disable defenses, access protected data, establish persistence, or move through a network.
From reporting threats to removing them.
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.
Patch Tuesday - September 2026
8 September 2026 at 17:44
Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published in a single day. As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for two of the vulnerabilities published today.
Windows ALPC: zero-day EoP
The eternal game of elevation of privilege whack-a-mole between Microsoft and attackers continues. This month, the battle is centered on the Windows Advanced Local Procedure Call (ALPC) mechanism, a kernel capability that facilitates inter-process communication. Microsoft is aware of exploitation in the wild already. Successful abuse of the flaw underlying CVE-2026-85880 grants an attacker SYSTEM via a buffer overflow that enables an out-of-bounds write, and as we all know by now, this is exactly what would happen during the first five minutes of a technically accurate horror movie about ransomware. We can infer one silver lining here: since neither Server 2025 nor Windows 11 receives patches for CVE-2026-85880, it is likely that Microsoft’s ongoing efforts to level up memory safety by rewriting critical kernel components in Rust are paying off.
Windows Update Stack: zero-day EoP
Attackers disappointed by Microsoft’s move towards memory safety improvements for various critical kernel components need not leave empty-handed today. Microsoft is aware of existing exploitation in the wild for CVE-2026-81963, an elevation of privilege vulnerability in the Windows Update Stack that leads to SYSTEM privileges via improper link resolution. All supported versions of Windows receive a patch, which presumably tightens up controls to prevent the Windows Update Stack from following a malicious link and overwriting a system component with an attacker-controlled imposter. The relatively pedestrian CVSS v3 base score of 7.8 is no reason for less concern, since no serious attacker will bother developing an intricate one-shot RCE when a two-stage attack chain consisting of low-privileged local access coupled with elevation of privilege will achieve the same ultimate goal much more easily.
Living on the Edge: browser advisory uncertainty
For the second month in a row, Microsoft does not appear to have published any desktop browser security advisories between the start of the month and Patch Tuesday. Microsoft Edge is built on top of Google’s open-source Chromium project, and on September 3, 2026, Google Chrome patched CVE-2026-85046, an exploited-in-the-wild zero-day vulnerability in the V8 JavaScript engine relied upon by both Edge and Chrome. So, is Microsoft Edge falling dangerously behind Google Chrome? Well, maybe. In this specific case, the Edge stable channel did receive a patch a day earlier than Chrome on September 2, 2026, and we know this because the Edge release notes mention it. However, almost a week later, Microsoft still hasn’t published a security advisory for CVE-2026-85046, and until that URL returns something better than a 404, that will remain true. In short: if you’re patched, you are protected, but if you rely on advisories to know which vulns exist, you could miss this zero-day vulnerability altogether. Only Microsoft knows why this advisory is missing, but there is no reason to suppose that Microsoft is somehow immune to the pressures that come along with the vast increase in vulnerability volume. A patch without an advisory is perhaps marginally better than an advisory without a patch, but keeping track of exposures without reliable advisory materials is not straightforward. Chrome patched 11 other vulnerabilities at the same time as CVE-2026-85046, but it’s not yet clear if those are patched in Edge. Until Microsoft sets the record straight, the only safe assumption is that these vulnerabilities (e.g. CVE-2026-85045) remain unpatched in Edge.
Microsoft lifecycle update
The next Microsoft product lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel, with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.
Summary charts
Summary tables
Apps vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-80097 | Microsoft Authenticator Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.6 |
| CVE-2026-58611 | Xbox Gaming Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
Azure vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | N/A | No | 10.0 |
| CVE-2026-62895 | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69857 | Azure Cosmos DB Spoofing Vulnerability | Exploitation More Likely | No | 8.5 |
| CVE-2026-77909 | Azure CycleCloud Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.7 |
| CVE-2026-81349 | Azure HDInsight Ambari Elevation of Privilege Vulnerability | N/A | No | 7.2 |
| CVE-2026-83941 | Entra ID Elevation of Privilege Vulnerability | N/A | No | 9.9 |
| CVE-2026-84003 | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | N/A | No | 10.0 |
| CVE-2026-83948 | Microsoft Azure CLI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-62906 | Microsoft Discovery Studio Information Disclosure Vulnerability | N/A | No | 7.4 |
| CVE-2026-62916 | Microsoft Entra ID Elevation of Privilege Vulnerability | N/A | No | 9.1 |
| CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | Exploitation More Likely | No | 9.0 |
Browser vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-84323 | Chromium: CVE-2026-84323 Missing authorization in FileSystem | n/a | No | |
| CVE-2026-84324 | Chromium: CVE-2026-84324 Use after free in Proxy | n/a | No | |
| CVE-2026-84325 | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | n/a | No | |
| CVE-2026-84326 | Chromium: CVE-2026-84326 Uninitialized resource in V8 | n/a | No | |
| CVE-2026-84327 | Chromium: CVE-2026-84327 Incorrect authorization in Autofill | n/a | No | |
| CVE-2026-84328 | Chromium: CVE-2026-84328 Missing authorization in FileSystem | n/a | No | |
| CVE-2026-84329 | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | n/a | No | |
| CVE-2026-84331 | Chromium: CVE-2026-84331 Incorrect authorization in Actor | n/a | No | |
| CVE-2026-84332 | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | n/a | No | |
| CVE-2026-84334 | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | n/a | No | |
| CVE-2026-84335 | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | n/a | No | |
| CVE-2026-84347 | Chromium: CVE-2026-84347 Use after free in WebRTC | n/a | No | |
| CVE-2026-84348 | Chromium: CVE-2026-84348 Information leak in MediaCapture | n/a | No | |
| CVE-2026-84349 | Chromium: CVE-2026-84349 Use after free in Browser | n/a | No | |
| CVE-2026-84350 | Chromium: CVE-2026-84350 Use after free in TabStrip | n/a | No | |
| CVE-2026-84351 | Chromium: CVE-2026-84351 Buffer overflow in GPU | n/a | No | |
| CVE-2026-84353 | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups | n/a | No | |
| CVE-2026-84354 | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | n/a | No | |
| CVE-2026-84355 | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | n/a | No | |
| CVE-2026-84356 | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | n/a | No | |
| CVE-2026-84357 | Chromium: CVE-2026-84357 Improper input validation in Omnibox | n/a | No | |
| CVE-2026-84358 | Chromium: CVE-2026-84358 Improper privilege management in Downloads | n/a | No | |
| CVE-2026-84359 | Chromium: CVE-2026-84359 Information leak in Skia | n/a | No |
Developer Tools vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-69439 | .NET and Visual Studio Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69522 | .NET and Visual Studio Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-71328 | .NET and Visual Studio Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69805 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69806 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-58649 | .NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2025-70873 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. | n/a | No | 7.5 |
| CVE-2026-57099 | ASP.NET Core Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69304 | ASP.NET Core Denial of Service Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | n/a | No | 9.1 |
| CVE-2026-81380 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | N/A | No | 5.3 |
| CVE-2026-81381 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-81383 | Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-70334 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-78461 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-78462 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-81356 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-81357 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-81376 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-81378 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-81379 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-81377 | Visual Studio Code Tampering Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-77906 | Visual Studio Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77907 | Visual Studio Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
ESU vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69329 | BranchCache Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68824 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68847 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69470 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69625 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73017 | Graphics Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.1 |
| CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 9.3 |
| CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62801 | Microsoft PowerShell Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69420 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69427 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69807 | PowerShell Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68893 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69514 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69539 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69568 | Storage Spaces Controller Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69384 | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69541 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69549 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69611 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69681 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-70574 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81355 | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69407 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69418 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69432 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72985 | Volume Shadow Copy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69609 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69808 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69832 | Win32k Information Disclosure Vulnerability | Exploitation More Likely | No | 5.6 |
| CVE-2026-69853 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-70290 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69654 | Windows Accounts Control Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69816 | Windows Accounts Control Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-70565 | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69834 | Windows ALPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69874 | Windows ALPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70342 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.1 |
| CVE-2026-69311 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69394 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69540 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69604 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69692 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69801 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70562 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-73005 | Windows Authentication Methods Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-73004 | Windows Autopilot Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69293 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69298 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69323 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
CVE-2026-69352 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69476 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69489 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69580 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69583 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69589 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69593 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69727 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69738 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69773 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69787 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69826 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-70572 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70573 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70581 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72941 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72988 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72990 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72991 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72992 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72993 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72994 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72995 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72996 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72997 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73000 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73001 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73002 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73007 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73011 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73015 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73020 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73021 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73026 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-77489 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78447 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-78448 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83954 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83955 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83967 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83968 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83969 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83970 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83971 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83972 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83973 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83974 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83975 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83976 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83977 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83978 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83979 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83980 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83981 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83982 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83983 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83985 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83986 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83987 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83988 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73008 | Windows Biometric Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69458 | Windows BitLocker Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69449 | Windows BitLocker Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-69817 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68849 | Windows Bluetooth Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-69388 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69398 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69448 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69889 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-77892 | Windows Boot Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69735 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69391 | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
CVE-2026-69283 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69561 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78454 | Windows CD-ROM Driver Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-80093 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-83991 | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69445 | Windows Compressed Folder Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69267 | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-70583 | Windows Core Messaging Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70584 | Windows Core Messaging Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70578 | Windows Credential Guard Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69790 | Windows Credential Providers Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69284 | Windows DCOM Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70568 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68831 | Windows Defender Firewall Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69607 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72943 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72954 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72957 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69314 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69693 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69296 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69478 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69488 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69574 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69581 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69711 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69714 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69791 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69866 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-77500 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-83940 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69472 | Windows Devices Human Interface Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69342 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69405 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69416 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69497 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69637 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69679 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-70065 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77494 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77498 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77499 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77501 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77502 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77886 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77888 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77889 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77890 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77893 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77895 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69415 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-69297 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69803 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69929 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69930 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-70124 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69266 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69412 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69510 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69547 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69620 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69847 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69876 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69878 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-77887 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-77891 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
CVE-2026-78446 | Windows Distributed File System (DFS) Denial of Service Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-69424 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69631 | Windows DNS Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-70091 | Windows DNS Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69310 | Windows DNS Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-72948 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69369 | Windows DNS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69672 | Windows DNS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72987 | Windows DNS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-78523 | Windows DNS Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69551 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69813 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69680 | Windows DNS Spoofing Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69430 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69688 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69841 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69794 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69481 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68894 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69362 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69433 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69436 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69450 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69462 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69513 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69612 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83996 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69684 | Windows Error Reporting Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69482 | Windows Error Reporting Tampering Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69494 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69495 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69619 | Windows exFAT File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-71338 | Windows Failover Cluster Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-68878 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69347 | Windows Fast FAT Driver Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.4 |
| CVE-2026-68837 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71340 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-72947 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.4 |
| CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68827 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69288 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69717 | Windows Group Policy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69710 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69725 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69784 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69799 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69820 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-69864 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-81354 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-72980 | Windows Hello Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.4 |
| CVE-2026-69682 | Windows Host Guardian Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69623 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69553 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-72961 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-69603 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69341 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69500 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69613 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69483 | Windows Image Acquisition Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69318 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69860 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73023 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77495 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-83992 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62694 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69441 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71339 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-77894 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72926 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72964 | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69881 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69429 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69694 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68898 | Windows iSCSI Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69598 | Windows iSCSI Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69628 | Windows iSCSI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73025 | Windows iSCSI Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 9.8 |
CVE-2026-69839 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69760 | Windows Kerberos Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69685 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69822 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69676 | Windows Kerberos Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-68846 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-68884 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69366 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69466 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69473 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69578 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-83942 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-85360 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69406 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-69723 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.7 |
| CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69421 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-84001 | Windows Key Distribution Center Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69712 | Windows Key Distribution Center Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69281 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69315 | Windows License Manager Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69732 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69451 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-70582 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-77905 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69349 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-73012 | Windows Management Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69891 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-70203 | Windows Media Player Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72960 | Windows Media Player Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69645 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68887 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72932 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-83997 | Windows Message Queuing Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-70579 | Windows Mobile Broadband Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69377 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69460 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-70577 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-73003 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-73022 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69674 | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72963 | Windows Modern Execution Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69357 | Windows NDIS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69396 | Windows NDIS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62759 | Windows Netlogon Spoofing Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72967 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68886 | Windows Network Connection Broker Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69372 | Windows Network File System Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69772 | Windows Network File System Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-71334 | Windows NFS Portmapper Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69648 | Windows Notification Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68832 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68834 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-68838 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-68841 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69265 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69312 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69332 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69340 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69505 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69532 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69567 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69875 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-72935 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-77503 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-83995 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68851 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69504 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69591 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-68833 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-68875 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69461 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69479 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.4 |
| CVE-2026-69566 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-69638 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.4 |
| CVE-2026-69709 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-71329 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69350 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69368 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69371 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69373 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69316 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69343 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69474 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.8 |
| CVE-2026-70586 | Windows Paint Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
CVE-2026-69480 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69492 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71341 | Windows Partition Management Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69324 | Windows Performance Monitor Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69459 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69321 | Windows Power Dependency Coordinator Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69569 | Windows Print Spooler Components Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-68835 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68848 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69309 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69346 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69364 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69838 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69921 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70564 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69344 | Windows Print Spooler Components Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69552 | Windows Print Spooler Components Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69602 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68845 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68876 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69534 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69563 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68874 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-62697 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69280 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69337 | Windows Registry Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69331 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69455 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71333 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71342 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-71343 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-71352 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72966 | Windows Remote Access Connection Manager Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69627 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70587 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69518 | Windows Remote Desktop Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69287 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69475 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-80096 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69616 | Windows Remote Desktop Services Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69548 | Windows RNDIS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-72939 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-71351 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71353 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69852 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-70570 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72950 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-72959 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69713 | Windows Secure Boot Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 4.4 |
| CVE-2026-69501 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69846 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-69906 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-72931 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-71332 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72930 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-77899 | Windows Security Center Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56177 | Windows Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83989 | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-73024 | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71330 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-70585 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69289 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-70563 | Windows Shell Spoofing Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69785 | Windows Smart Card Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69572 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69618 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69374 | Windows SMB Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69403 | Windows SMB Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69512 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69535 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69643 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69691 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69390 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69393 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69741 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69770 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69895 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-72942 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69538 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-71345 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71348 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-71349 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-71350 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-72952 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69328 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78516 | Windows Storage Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.3 |
| CVE-2026-69389 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71337 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69381 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-72937 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-77492 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69290 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69575 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68844 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68877 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72945 | Windows Task Scheduler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69385 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69404 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69757 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69761 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69793 | Windows TCP/IP Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69353 | Windows Text Shaping Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69786 | Windows Text Shaping Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69573 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69592 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69758 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68830 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69351 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69434 | Windows URL Moniker Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73019 | Windows URL Moniker Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 4.3 |
| CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
CVE-2026-69469 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.6 |
| CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69687 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69707 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69859 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69286 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68840 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69295 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69503 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-72953 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69457 | Windows USB Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-72999 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69490 | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69527 | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69319 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69423 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69584 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72962 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-56172 | Windows VHD miniport driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69890 | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69426 | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69468 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69582 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-77904 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69291 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69334 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69708 | Windows Web Platform Storage Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-72965 | Windows WebClient Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68880 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69274 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69301 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69335 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69410 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69498 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69610 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69630 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69652 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69689 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69706 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69762 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69779 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69844 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70283 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70289 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69792 | Windows Win32K Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69517 | Windows Wireless Networking Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69862 | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69560 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71336 | Windows Work Folder Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-80075 | Windows Work Folders Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72927 | Winsock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-78455 | Xbox Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.3 |
Mariner vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2025-70873 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. | n/a | No | 7.5 |
Microsoft Dynamics vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-65772 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77908 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | N/A | No | 8.8 |
| CVE-2026-77897 | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65818 | Power Automate Elevation of Privilege Vulnerability | N/A | No | 8.5 |
Microsoft Office vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-80098 | Copilot Studio Elevation of Privilege Vulnerability | N/A | No | 9.3 |
| CVE-2026-81387 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81390 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81391 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81392 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81393 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81394 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81395 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-81399 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81400 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-81401 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81958 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-81386 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81388 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-81389 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-81396 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-81397 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81398 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81947 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81948 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81949 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-81950 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81951 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81953 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81954 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81956 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81957 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81959 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81960 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70178 | Microsoft Fabric Elevation of Privilege Vulnerability | N/A | No | 8.5 |
| CVE-2026-69477 | Microsoft Office Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-69529 | Microsoft Office Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69614 | Microsoft Office Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69778 | Microsoft Office Access Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-72974 | Microsoft Office Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78515 | Microsoft Office Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-85875 | Microsoft Office Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-78518 | Microsoft Office Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78439 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69626 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69739 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80076 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80078 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80082 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80087 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80089 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80091 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78520 | Microsoft Office Outlook Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80073 | Microsoft Office Outlook Information Disclosure Vulnerability | Exploitation Less Likely | No | |
| CVE-2026-80084 | Microsoft Office Outlook Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69629 | Microsoft Office Outlook Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78509 | Microsoft Office Outlook Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-78519 | Microsoft Office Outlook Remote Code Execution Vulnerability | Exploitation Less Likely | No | |
| CVE-2026-78525 | Microsoft Office Outlook Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72938 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-72956 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-72975 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-72977 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78513 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-80086 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69678 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69767 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69797 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-80081 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | |
| CVE-2026-69742 | Microsoft Office Publisher Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-81385 | Microsoft Office Publisher Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69285 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69442 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69632 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77898 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-78505 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78524 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69464 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69716 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 3.5 |
| CVE-2026-69268 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69273 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69282 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69465 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69724 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69804 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69402 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-69417 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-69615 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Unlikely | No | 3.5 |
| CVE-2026-69690 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-64918 | Microsoft Office Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
CVE-2026-69719 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69734 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-72976 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 |
| CVE-2026-77911 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78502 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78503 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78506 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-78522 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | |
| CVE-2026-80079 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | |
| CVE-2026-80088 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-80090 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-83949 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-83951 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69556 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69671 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69686 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69722 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69759 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69764 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-72972 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72973 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77901 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78504 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78507 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78511 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78512 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78514 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78517 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78521 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78526 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-80080 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-80085 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65812 | Microsoft Teams for Android Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69559 | Microsoft Teams for Android Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.8 |
| CVE-2026-62804 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78510 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-81952 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66303 | Skype for Business and Lync Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66307 | Skype for Business and Lync Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-66308 | Skype for Business and Lync Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66304 | Skype for Business Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-66306 | Skype for Business Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66302 | Skype for Business Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-63523 | Skype for Business Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66305 | Skype for Business Spoofing Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69642 | Skype for Business Spoofing Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69646 | Skype for Business Spoofing Vulnerability | Exploitation Less Likely | No | 8.3 |
| CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
Open Source Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-69805 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2025-70873 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. | n/a | No | 7.5 |
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | n/a | No | 9.1 |
Server Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.1 |
| CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 9.3 |
| CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | Exploitation Less Likely | No | 6.5 |
SQL Server vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-67633 | Microsoft SQL Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-67641 | Microsoft SQL Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-66814 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66818 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66819 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67369 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67383 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-67386 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-67389 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67390 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67393 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67624 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67629 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-67630 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-67645 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-67648 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68776 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-68777 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68778 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68779 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68780 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68781 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68784 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69562 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-73029 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-77488 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-47297 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-67373 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67378 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.5 |
| CVE-2026-67379 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.5 |
| CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-67636 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.5 |
| CVE-2026-67638 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-67642 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-67643 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-68785 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 4.9 |
| CVE-2026-68786 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-68787 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-77482 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77484 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77486 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-66816 | Microsoft SQL Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73028 | SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77480 | SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77483 | SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77485 | SQL Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-77487 | SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78456 | SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78441 | Windows OLE DB Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-78442 | Windows OLE DB Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
Windows vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69401 | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69329 | BranchCache Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68824 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68847 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69470 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69625 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73017 | Graphics Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-81353 | HEIF Image Extensions Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58600 | HEVC Video Extensions Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58599 | HEVC Video Extensions Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68850 | Microsoft Account Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-73010 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-78444 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-83990 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69594 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62801 | Microsoft PowerShell Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-57098 | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-72946 | Microsoft Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-56198 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69420 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69427 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70351 | Microsoft WebP Image Extension Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68896 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69322 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69507 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69807 | PowerShell Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69649 | Raw Image Extension Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-78463 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-80074 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-80077 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68893 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69514 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69536 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69539 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69599 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69568 | Storage Spaces Controller Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69384 | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69541 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69549 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69611 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69681 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-70574 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-81355 | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69407 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69418 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69432 | Volume Manager Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72985 | Volume Shadow Copy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-81352 | Web Media Extensions Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69609 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69808 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69832 | Win32k Information Disclosure Vulnerability | Exploitation More Likely | No | 5.6 |
| CVE-2026-69853 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-70290 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69654 | Windows Accounts Control Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69816 | Windows Accounts Control Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69809 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-70565 | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69834 | Windows ALPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69874 | Windows ALPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70342 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.1 |
| CVE-2026-69311 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69394 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69447 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69540 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69604 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69692 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69801 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70562 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-73005 | Windows Authentication Methods Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-73004 | Windows Autopilot Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-68825 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69293 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69298 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69323 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69352 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69476 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69489 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69580 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69583 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69589 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69593 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69727 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69738 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69773 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69787 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69826 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-70572 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70573 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70581 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72941 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72988 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72990 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72991 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72992 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72993 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72994 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72995 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72996 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72997 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73000 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73001 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73002 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73007 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73011 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73015 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73020 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73021 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-73026 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-77489 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78447 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-78448 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83954 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83955 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83967 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83968 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83969 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83970 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83971 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83972 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83973 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83974 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83975 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83976 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83977 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83978 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83979 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83980 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83981 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83982 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83983 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83985 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83986 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83987 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-83988 | Windows Biometric Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-73008 | Windows Biometric Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69458 | Windows BitLocker Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69449 | Windows BitLocker Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-69817 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68849 | Windows Bluetooth Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-69388 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69398 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69448 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69889 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-77892 | Windows Boot Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69735 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69391 | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69542 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69283 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69561 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78454 | Windows CD-ROM Driver Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-80093 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-83991 | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69445 | Windows Compressed Folder Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70019 | Windows Compressed Folder Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
CVE-2026-69267 | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69771 | Windows Container Manager Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-70583 | Windows Core Messaging Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70584 | Windows Core Messaging Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70578 | Windows Credential Guard Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-72958 | Windows Credential Guard Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-69790 | Windows Credential Providers Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69814 | Windows Credential Providers Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69729 | Windows Credential Providers Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69284 | Windows DCOM Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70568 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68831 | Windows Defender Firewall Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69607 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72943 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72954 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72957 | Windows Deployment Services Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69314 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69693 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69296 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69478 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69488 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69574 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69581 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69711 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69714 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69791 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69866 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-77500 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-83940 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69443 | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69472 | Windows Devices Human Interface Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69781 | Windows DHCP Client Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69777 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69342 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69405 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69416 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69497 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69637 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69679 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-70065 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77494 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77498 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77499 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77501 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77502 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77886 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77888 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77889 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77890 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-77893 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77895 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69415 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-69297 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69803 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69929 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69930 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-70124 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69266 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69412 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69510 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69547 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69620 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69847 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69876 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69878 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-77887 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-77891 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-70567 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-78446 | Windows Distributed File System (DFS) Denial of Service Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-69424 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69631 | Windows DNS Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-70091 | Windows DNS Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69310 | Windows DNS Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-72948 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69369 | Windows DNS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69672 | Windows DNS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72987 | Windows DNS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-78523 | Windows DNS Server Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-69551 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69813 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69858 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-72928 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69680 | Windows DNS Spoofing Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69775 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69430 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69688 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69841 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69794 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69481 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68894 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69362 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69433 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69436 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69450 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69462 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69513 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69612 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69896 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-83996 | Windows Error Reporting Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69684 | Windows Error Reporting Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69482 | Windows Error Reporting Tampering Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69494 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69495 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69619 | Windows exFAT File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-71338 | Windows Failover Cluster Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-72989 | Windows Failover Cluster Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-68878 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69347 | Windows Fast FAT Driver Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.4 |
| CVE-2026-68837 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71340 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-72947 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.4 |
| CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68827 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69288 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69717 | Windows Group Policy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69710 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69725 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69740 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69784 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69799 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69820 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-69864 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-81354 | Windows Hello Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-72980 | Windows Hello Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.4 |
| CVE-2026-69682 | Windows Host Guardian Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69623 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69597 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69553 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-72961 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-69603 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-80083 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69341 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69500 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69613 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69483 | Windows Image Acquisition Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69318 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69860 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73023 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-77495 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-83992 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62694 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69441 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71339 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-72929 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-77894 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72926 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72964 | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69587 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69881 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69429 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69694 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68898 | Windows iSCSI Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69598 | Windows iSCSI Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69628 | Windows iSCSI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73025 | Windows iSCSI Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 9.8 |
CVE-2026-69839 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69744 | Windows Kerberos Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69760 | Windows Kerberos Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69685 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69822 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69676 | Windows Kerberos Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-68846 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-68884 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69366 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69466 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69473 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69578 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-83942 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-85360 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69406 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-69723 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.7 |
| CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69421 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-84001 | Windows Key Distribution Center Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69712 | Windows Key Distribution Center Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69281 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69315 | Windows License Manager Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69732 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69451 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-70582 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-77905 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69349 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-73012 | Windows Management Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69891 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-70203 | Windows Media Player Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72960 | Windows Media Player Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69645 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68887 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72932 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-83997 | Windows Message Queuing Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-69440 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69508 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69720 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-78464 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68842 | Windows MIDI Service Module Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69339 | Windows MIDI Service Module Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70579 | Windows Mobile Broadband Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69377 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69460 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-70577 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-73003 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-73022 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69674 | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72963 | Windows Modern Execution Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69357 | Windows NDIS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69396 | Windows NDIS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62759 | Windows Netlogon Spoofing Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72967 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68886 | Windows Network Connection Broker Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69372 | Windows Network File System Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69772 | Windows Network File System Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-71334 | Windows NFS Portmapper Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69648 | Windows Notification Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68832 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68834 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-68838 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-68841 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69265 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69312 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69332 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69340 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69379 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69505 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69532 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69567 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69875 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-72935 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-77503 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-83995 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68851 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69504 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69591 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-68833 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-68875 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69461 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69479 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.4 |
| CVE-2026-69566 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-69638 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.4 |
| CVE-2026-69709 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-71329 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69425 | Windows NTFS Tampering Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69350 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69368 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69371 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69373 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-69316 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69343 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69474 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.8 |
| CVE-2026-70586 | Windows Paint Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-69480 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69492 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71341 | Windows Partition Management Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69324 | Windows Performance Monitor Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69459 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69321 | Windows Power Dependency Coordinator Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69569 | Windows Print Spooler Components Denial of Service Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-68835 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68848 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69309 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69346 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69364 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69838 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69921 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70564 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69344 | Windows Print Spooler Components Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69552 | Windows Print Spooler Components Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-85877 | Windows Print Spooler Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69602 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-68845 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68876 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69534 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69563 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68873 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68874 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-62697 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69280 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69300 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69337 | Windows Registry Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69530 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-78450 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69331 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69455 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71333 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71342 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-71343 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-71352 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-72966 | Windows Remote Access Connection Manager Tampering Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69627 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70587 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69518 | Windows Remote Desktop Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69287 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69475 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-80096 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69616 | Windows Remote Desktop Services Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-83999 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69617 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-83952 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69548 | Windows RNDIS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-72939 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-71351 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71353 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69852 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-70570 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-72950 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-72959 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70575 | Windows Schannel Denial of Service Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-72940 | Windows Schannel Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-69713 | Windows Secure Boot Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 4.4 |
| CVE-2026-69501 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69846 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-69906 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-83939 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-72931 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-71332 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-72930 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
CVE-2026-77899 | Windows Security Center Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-78457 | Windows Security Health Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56177 | Windows Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83989 | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-73024 | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71330 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-70585 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69289 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69383 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69392 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69528 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69606 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-70563 | Windows Shell Spoofing Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69785 | Windows Smart Card Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69544 | Windows SMB Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69572 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.7 |
| CVE-2026-69618 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72936 | Windows SMB Client Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.1 |
| CVE-2026-69374 | Windows SMB Server Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69403 | Windows SMB Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-72949 | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-69512 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69535 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69643 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69691 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70569 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69390 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69393 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.7 |
| CVE-2026-69741 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69770 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69895 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-72942 | Windows Spaceport.sys Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-69538 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-71345 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71348 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-71349 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-71350 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-72952 | Windows Spaceport.sys Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69328 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-78516 | Windows Storage Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.3 |
| CVE-2026-69389 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-71337 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69381 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-72937 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-77492 | Windows Storage Port Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69290 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69575 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-68844 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68877 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72945 | Windows Task Scheduler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69588 | Windows TCP/IP Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69385 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69404 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69757 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69761 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-69793 | Windows TCP/IP Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-69353 | Windows Text Shaping Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69786 | Windows Text Shaping Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-69573 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69592 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69758 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68830 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-69351 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-69434 | Windows URL Moniker Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-73019 | Windows URL Moniker Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 4.3 |
| CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69469 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.6 |
| CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69687 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69707 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69859 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69286 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68840 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69295 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69503 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-72953 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69457 | Windows USB Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-72999 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69490 | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-69527 | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69319 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69422 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69423 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69584 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-72962 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.2 |
| CVE-2026-56172 | Windows VHD miniport driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69890 | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-83498 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-83501 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-69426 | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-69468 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69582 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-77904 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-69291 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69334 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69708 | Windows Web Platform Storage Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-72965 | Windows WebClient Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68880 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69274 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.1 |
| CVE-2026-69301 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.0 |
| CVE-2026-69333 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69335 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69348 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
CVE-2026-69410 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69498 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69610 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69630 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69652 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69689 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-69706 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-69762 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-69779 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-69818 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-69844 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70283 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-70289 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69792 | Windows Win32K Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.7 |
| CVE-2026-69517 | Windows Wireless Networking Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-69862 | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-69560 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-71336 | Windows Work Folder Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-80075 | Windows Work Folders Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-72927 | Winsock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-78455 | Xbox Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.3 |
Uncategorized Vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-19931 | Negotiate ambient user conn reuse | n/a | No | 6.5 |
| CVE-2026-82208 | wolfSSL CA-cache hit overrides callback | n/a | No | 7.4 |
| CVE-2026-13608 | OpenLDAP SASL authentication bypass | n/a | No | 3.7 |
| CVE-2026-18924 | HTTP/2 server push UAF | n/a | No | 5.9 |
Zero-Day Vulnerabilities: Known Exploited
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
Critical RCEs and EoPs
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | N/A | No | 10.0 |
| CVE-2026-80098 | Copilot Studio Elevation of Privilege Vulnerability | N/A | No | 9.3 |
| CVE-2026-83941 | Entra ID Elevation of Privilege Vulnerability | N/A | No | 9.9 |
| CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | N/A | No | 10.0 |
| CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62916 | Microsoft Entra ID Elevation of Privilege Vulnerability | N/A | No | 9.1 |
| CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.1 |
| CVE-2026-73010 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-78509 | Microsoft Office Outlook Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-78510 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-66302 | Skype for Business Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | Exploitation More Likely | No | 9.0 |
| CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
12 August 2026 at 09:48
Microsoft’s August 2026 Patch Tuesday addresses 421 Microsoft vulnerabilities, including 62 rated Critical. One Windows vulnerability has been exploited in the wild by the Lazarus group to gain SYSTEM privileges.
The August update is smaller than July’s record-breaking release, but it’s still among Microsoft’s largest Patch Tuesday batches. More importantly, it includes several flaws likely to attract attacker interest: a publicly disclosed Windows privilege escalation flaw with a proof-of-concept (PoC), a newly completed unauthenticated SharePoint remote code execution (RCE) chain, and a potentially wormable Windows DNS Server flaw.
How to apply patches and check if you’re protected
These updates fix security problems and help keep your Windows PC protected. Here’s how to make sure you’re up to date:
- Click the Start button, then open Settings.
- Select Windows Update (usually at the bottom of the menu on the left).
- Click Check for updates. Windows will search for the latest security updates. If you’ve enabled Get the latest updates as soon as they’re available under More options, you may be prompted to restart immediately to complete the update. Otherwise, continue to the next step.
- If updates are available, they’ll start downloading automatically. When they’re ready, click Install or Restart now if prompted. Your computer may need a restart to finish the update.
- After restarting, go back to Windows Update and check again. If it says You’re up to date, you’re all set.
Technical details
Windows Deployment Services (WDS) users should prioritize CVE-2026-62893 (CVSS score 9.8 out of 10), an unauthenticated RCE flaw in the TFTP (Trivial File Transfer Protocol) server. TFTP normally runs on UDP port 69 and has no built-in authentication. It is primarily an enterprise and school network issue, but it could enable lateral movement where WDS is deployed.
Microsoft also fixed CVE-2026-62832, a publicly disclosed elevation of privilege (EoP) vulnerability in the Windows User Profile Service. It maps to the issue researchers called LegacyHive, for which a limited public proof of concept was released in July.
The PoC demonstrates how a local authenticated attacker could abuse the service’s registry hive handling to load another user’s hive, potentially including an administrator’s. The released demonstration is deliberately constrained and requires credentials for another user, but the availability of code and the broad Windows footprint make this one a strong candidate for exploitation attempts.
Another good reason to promptly update is the number (I counted 48) of remote code execution (RCE) fixes for Office applications and components, including Excel, Word, Outlook, PowerPoint, and the Office graphics component. Document-borne vulnerabilities are attractive to phishing operators because email attachments and shared documents provide delivery mechanisms that people are likely to open.
“One of the best cybersecurity suites on the planet.”
According to CNET. Read their review →
Microsoft August 2026 Patch Tuesday Fixes 400 Flaws, Including Three Zero-days
12 August 2026 at 03:22
August 2026 Patch Tuesday Zero-days
Microsoft defines a zero-day as a vulnerability that has been publicly disclosed or actively exploited before an official fix is available. The three Zero-days addressed in August 2026 are: CVE-2026-68820 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability: This actively exploited flaw allows a locally authenticated attacker to trigger a race condition through a specially crafted application and obtain SYSTEM privileges without user interaction. Microsoft credited Moshe Marelus and David Driker of Check Point. Check Point reported that North Korean Lazarus threat actors exploited the flaw in Zero-day attacks to deploy a new version of the FudModule kernel-mode rootkit. “During the intrusion, the threat actor exploited CVE-2026-68820, a zero-day vulnerability in the Microsoft AFD.sys driver, to deploy a new version of FudModule, Lazarus’ kernel-mode rootkit,” Check Point said. Microsoft has not disclosed exploitation details. CVE-2026-62832 — Windows User Profile Service Elevation of Privilege Vulnerability: This publicly disclosed flaw can allow an authenticated attacker with credentials for another local account to load another user’s registry hive, potentially access or modify data and gain administrator privileges. Microsoft credited an anonymous researcher. The details match the “LegacyHive” Zero-day disclosed last month by researcher Nightmare Eclipse. CVE-2026-72971 — Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability: This publicly disclosed flaw involves improper link resolution and allows authenticated attackers to perform local tampering. Microsoft attributed its discovery to yhw and txz but did not identify where the vulnerability was disclosed.August 2026 Security Updates
Microsoft’s August 2026 release consists of 421 Microsoft CVEs spanning Azure, Defender, Developer Tools, Exchange Server, Office, Office 2016, Other, SharePoint Server and Windows. Windows accounts for 236 vulnerabilities, Office for 98, SharePoint Server for 30, Developer Tools for 26, Azure for 17, Exchange Server for seven, Other for six, and Defender for one. The release also republishes two non-Microsoft CVEs: CVE-2026-6726 and CVE-2026-6727, both tagged as Windows TPM issues by MITRE. FAQs are available for both, while no workarounds or mitigations are listed. Separate non-security releases include Windows 11 KB5121003 and KB5120240 cumulative updates and the Windows 10 KB5120249 extended security update.Patch Tuesday - August 2026
11 August 2026 at 17:10
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the Notable CVEs section of the Security Update Guide omits one of these. As usual, browser vulns are not included in the Patch Tuesday count above, but unusually, Microsoft does not appear to have published any desktop browser security patches so far this month.
SharePoint: critical RCE chain by Rapid7
Today sees the publication of CVE-2026-63520, a high-severity remote code execution in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft; this vulnerability is the second in a pair of exploits which, when chained together, comprise a critical unauthenticated remote code execution vulnerability in a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. Alongside today’s coordinated disclosure of CVE-2026-63520, Rapid7 has now published a detailed technical analysis and proof-of-concept for CVE-2026-55040, the first vulnerability in the chain.
AFD for Winsock: zero-day EoP
Rapid7 has previously discussed the Windows Ancillary Function Driver for WinSock, and today it returns to center stage with another exploited-in-the-wild elevation-of-privilege vulnerability. Successful exploitation requires winning a race condition, which increases the difficulty of producing a stable exploit. This also helps keep the CVSS v3 base score down to 7.0, along with a Microsoft proprietary severity ranking of merely important, rather than critical. However, with no user interaction required, and a prize of SYSTEM-level access, CVE-2026-68820 is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon.
What’s the opposite of coordinated disclosure?
This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of CVE-2026-62832, an elevation of privilege vulnerability in the Windows User Profile Service. Exploitation leads to administrator rights on the local asset, and is achieved via a specially crafted application, which is Microsoft corporate argot for exploit code. Between the public disclosure and the FAQ, which describes an authenticated attacker who has credentials for another account and loads another user’s registry hive, the advisory is a solid match for Nightmare Eclipse’s description of LegacyHive, which Rapid7 discussed last month.
Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as CVE-2026-50656 during July, a month after its public disclosure. Both vulnerabilities are therefore elevation-of-privilege to SYSTEM vulnerabilities in Defender.
Container isolation filesystem driver: isolation failure, tampering
CVE-2026-72971 describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case.
Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which MSRC has ever patched or otherwise addressed. CVE-2026-72971 isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities.
Edge: update slowdown?
Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge last received security patches on July 31, 2026. Meanwhile, the Chrome Stable Channel received patches for 41 vulnerabilities on August 6, 2026. Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past.
Microsoft lifecycle update
August is typically a quieter month for Microsoft product lifecycle transitions, and this year continues that pattern. The next lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel, with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.
Summary charts
Summary tables
Vulnerabilities by Product Family
Apps vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
Azure vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-47299 | Azure Monitor Agent Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
Browser vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70339 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 5.4 |
| CVE-2026-19137 | CVE-2026-19137 Use after free in WebGL | n/a | No | |
| CVE-2026-19138 | CVE-2026-19138 Heap buffer overflow in CrashReporting | n/a | No | |
| CVE-2026-19139 | CVE-2026-19139 Race in CredentialProvider | n/a | No | |
| CVE-2026-19140 | CVE-2026-19140 Use after free in GPU | n/a | No | |
| CVE-2026-19142 | CVE-2026-19142 Use after free in Views | n/a | No | |
| CVE-2026-19144 | CVE-2026-19144 Use after free in HTML | n/a | No | |
| CVE-2026-19145 | CVE-2026-19145 Use after free in Translate | n/a | No | |
| CVE-2026-19146 | CVE-2026-19146 Uninitialized Use in GPU | n/a | No | |
| CVE-2026-19147 | CVE-2026-19147 Use after free in Aura | n/a | No | |
| CVE-2026-19148 | CVE-2026-19148 Out of bounds write in GPU | n/a | No | |
| CVE-2026-19149 | CVE-2026-19149 Use after free in Aura | n/a | No | |
| CVE-2026-19150 | CVE-2026-19150 Inappropriate implementation in V8 | n/a | No | |
| CVE-2026-19151 | CVE-2026-19151 Use after free in V8 | n/a | No | |
| CVE-2026-19152 | CVE-2026-19152 Inappropriate implementation in Navigation | n/a | No | |
| CVE-2026-19153 | CVE-2026-19153 Insufficient validation of untrusted input in Workers | n/a | No | |
| CVE-2026-19155 | CVE-2026-19155 Use after free in Payments | n/a | No | |
| CVE-2026-19156 | CVE-2026-19156 Heap buffer overflow in Base | n/a | No | |
| CVE-2026-19157 | CVE-2026-19157 Out of bounds write in ANGLE | n/a | No | |
| CVE-2026-19158 | CVE-2026-19158 Use after free in Views | n/a | No | |
| CVE-2026-19159 | CVE-2026-19159 Use after free in Views | n/a | No | |
| CVE-2026-19160 | CVE-2026-19160 Uninitialized Use in Skia | n/a | No | |
| CVE-2026-19161 | CVE-2026-19161 Uninitialized Use in Skia | n/a | No | |
| CVE-2026-19162 | CVE-2026-19162 Out of bounds write in V8 | n/a | No | |
| CVE-2026-19163 | CVE-2026-19163 Use after free in Media | n/a | No | |
| CVE-2026-19164 | CVE-2026-19164 Insufficient validation of untrusted input in Codecs | n/a | No | |
| CVE-2026-19165 | CVE-2026-19165 Use after free in Extensions | n/a | No | |
| CVE-2026-19166 | CVE-2026-19166 Use after free in Web Authentication | n/a | No | |
| CVE-2026-19167 | CVE-2026-19167 Integer overflow in GPU | n/a | No | |
| CVE-2026-19168 | CVE-2026-19168 Inappropriate implementation in V8 | n/a | No | |
| CVE-2026-19169 | CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks | n/a | No | |
| CVE-2026-19170 | CVE-2026-19170 Use after free in WebGL | n/a | No | |
| CVE-2026-19171 | CVE-2026-19171 Use after free in Media | n/a | No | |
| CVE-2026-19172 | CVE-2026-19172 Use after free in Views | n/a | No | |
| CVE-2026-19173 | CVE-2026-19173 Out of bounds write in Skia | n/a | No | |
| CVE-2026-19174 | CVE-2026-19174 Integer overflow in V8 | n/a | No | |
| CVE-2026-19175 | CVE-2026-19175 Use after free in Payments | n/a | No | |
| CVE-2026-19176 | CVE-2026-19176 Use after free in Skia | n/a | No | |
| CVE-2026-19177 | CVE-2026-19177 Insufficient validation of untrusted input in UI | n/a | No |
Developer Tools vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62901 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-58641 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62898 | Microsoft QUIC Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-58612 | PowerShell Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
ESU vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.6 |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
Microsoft Dynamics vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-40375 | Microsoft Dynamics Business Central Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
Microsoft Office vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 9.3 |
| CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability | Exploitation Unlikely | No | 4.3 |
| CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.3 |
| CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.1 |
| CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-65660 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 7.3 |
| CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 4.6 |
| CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65767 | Microsoft Teams for Android and iOS Spoofing Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
Server Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
SQL Server vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-65811 | Power BI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
System Center vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
Windows vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | N/A | No | 9.8 |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62798 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62705 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62722 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Exploitation Unlikely | Yes | 5.5 |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.6 |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.4 |
| CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Exploitation Less Likely | No | 8.3 |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
Zero-Day Vulnerabilities: Known Exploited
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
Zero-Day Vulnerabilities: Publicly Disclosed (No known exploitation)
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Exploitation Unlikely | Yes | 5.5 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
Patch Tuesday - July 2026
14 July 2026 at 18:00
Microsoft is publishing 622 vulnerabilities on July 2026 Patch Tuesday, including a record-breaking 416 Windows vulnerabilities. Microsoft is aware of exploitation in the wild for two of the vulnerabilities published today, both of which are listed on CISA KEV, as well as public disclosure for one other. As usual, browser vulns are not included in the Patch Tuesday count above. Rapid7 noted last month that Microsoft no longer enumerates Chromium CVEs in the Security Update Guide. However, Microsoft has now taken the pursuit of minimalism much further, since today’s Security Update Guide no longer lists out even Microsoft vulnerabilities! Instead, we now receive a summary table of vulnerability counts by product family, as well as a new slimline “Notable CVEs” section. All of this only serves to illustrate the recent industry-wide trend of exploding vulnerability report counts, with an associated uptick in the publication of remediations as a trailing indicator.
SharePoint: critical auth bypass by Rapid7
Today sees the publication of CVE-2026-55040, a critical authentication bypass in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft, this vulnerability is the first in a pair of exploits which, when chained together, can lead to unauthenticated remote code execution against a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. As the full Rapid7 blog post sets out, the second vulnerability in the full RCE chain remains embargoed for now, with Microsoft expected to publish patches for that second vulnerability as part of Patch Tuesday August 2026. Microsoft noted: “We would like to thank Rapid7 for responsibly reporting this issue through coordinated vulnerability disclosure.”
SharePoint: zero-day EoP
It’s a rare Patch Tuesday which doesn’t include multiple SharePoint fixes, and today is no exception. Microsoft is aware of existing in-the-wild exploitation of CVE-2026-56164, where successful exploitation allows an attacker to elevate privileges over a network, with no existing privileges required, and low attack complexity since “an attacker does not require significant prior knowledge of the system, and can achieve repeatable success”. This is as good an example as any that a relatively low CVSS v3 base score (5.3) may be an imperfect signal concealing something much spicier, and Microsoft acknowledges that possibility by assigning a severity rating of Important. Microsoft certainly intended to list CVE-2026-56164 in the new Notable CVEs section of the Security Update Guide instead of erroneously listing CVE-2026-56155 twice, and it’s likely that this will be corrected shortly.
What’s the opposite of coordinated disclosure?
After years of relative stability, the Patch Tuesday process has experienced significant turbulence so far in 2026. As well as the AI-fuelled exponential growth of vulnerability reporting and discovery, Microsoft is grappling with the emergence of a series of vulnerabilities disclosed in such a way as to bring maximum discomfort for Redmond. Pseudonymous researcher Nightmare Eclipse dropped another Defender elevation of privilege vulnerability in the hours following Patch Tuesday June 2026, which Microsoft subsequently published and patched as CVE-2026-50656, along with a terse acknowledgement of the vulnerability’s celebrity nickname of RoguePlanet. Recently, Nightmare Eclipse has given conflicting estimates of what sort of surprises Microsoft can expect today, as well as claiming that the CVE-2026-50656 patches introduce a new avenue for a disk exhaustion attack. Today, a new proof of concept for a further vulnerability nicknamed LegacyHive has emerged from the same source, which appears to allow a non-privileged user to mount another user’s user hive.
Microsoft BitLocker receives patches today for a publicly-known security feature bypass vulnerability. The advisory for CVE-2026-50661 explains that an unauthorized attacker with physical access to the target machine can bypass Windows BitLocker. While Microsoft doesn’t confirm either way, it’s very probable that this is a patch for the GreatXML vulnerability which Nightmare Eclipse announced the day after Patch Tuesday June 2026.
Active Directory Federation Services: zero-day EoP
Active Directory administrators should note the emergence today of CVE-2026-56155, an exploited-in-the-wild elevation of privilege vulnerability in Active Directory Federation Services which allows an authorized attacker to elevate privileges locally. Eight other vulnerabilities are also published today in Active Directory Federation Services, all ranked as Important on Microsoft’s proprietary severity ranking scale. The advisory doesn’t explicitly describe the location of the attacker, but it’s likely that an attacker would need an existing toehold on the target system to chain together with the elevation of privilege opportunity on offer here.
Age of Empires II: RCE
Historically, Patch Tuesday hasn’t seen too many security patches for video games. However, Age of Empires II: Definitive Edition is a new entrant to the Microsoft CVE roster today. Veteran AoE2 players may well be familiar with dangerous opposition early game strategies such as the Persian Town Center nuisance or the Aztec monk rush, but anyone who opens a malicious game scenario file without applying the patch for CVE-2026-50663 might suffer a serious defeat. Successful exploitation allows an attacker to place malicious files in unexpected locations, potentially enabling code execution on the target system.
Microsoft lifecycle update
As Rapid7 noted last month, there are some significant Microsoft product lifecycle changes taking place in mid-July. SQL Server 2016 moves beyond regular extended support and into the pay-to-play Extended Security Updates (ESU) phase from July 15, 2026, and its older sibling SQL Server 2014 moves into the third and final year of ESU. Also on July 14, 2026, SharePoint Server 2016 and 2019 reach extended end date, and since there’s no ESU available, the only remaining option for fully-supported self-hosted SharePoint after today is SharePoint Subscription Edition. The July 2026 lifecycle casualties continue with Project Server 2016 and 2019, Dynamics GP 2016 and 2016 R2, InfoPath 2013, and SharePoint Designer 2013, which also all reach their Extended End Dates, ending their supported lifecycles. Visual Studio 2022 Version 17.12 Long-Term Servicing Channel (LTSC) reaches its release end date on July 14, leaving either the Visual Studio 2022 current channel or an upgrade to Visual Studio 2026 as supported options.
Summary charts
Summary tables
Apps vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-58617 | M365 Copilot for iOS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-58595 | Microsoft Bing App for IOS Spoofing Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-48561 | Microsoft Copilot Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-58636 | Microsoft PC Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50438 | Microsoft PC Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
Azure vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50653 | Azure Active Directory Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-57969 | Azure CycleCloud Elevation of Privilege Vulnerability | N/A | No | 8.8 |
| CVE-2026-58279 | Azure CycleCloud Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-47632 | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
Developer Tools vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-47302 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50525 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50651 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-57108 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50524 | .NET Framework Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50527 | .NET Framework Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50648 | .NET Framework Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50649 | .NET Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-47304 | .NET Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-50528 | .NET Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-50659 | .NET Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50526 | .NET Tampering Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-41109 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50506 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-45646 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-47305 | Visual Studio Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
Device vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-48581 | Surface Broker SDMA Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
ESU vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50682 | Active Directory Denial of Service Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability | N/A | No | 4.8 |
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability | N/A | No | 8.8 |
| CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 6.3 |
| CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49174 | DNS Client Tampering Vulnerability | Exploitation Unlikely | No | 6.1 |
| CVE-2026-50495 | DNS Client Tampering Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation More Likely | No | 9.6 |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.4 |
| CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.9 |
| CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.2 |
| CVE-2026-56184 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | Exploitation Less Likely | Yes | 6.1 |
| CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution | Exploitation Less Likely | No | 8.0 |
| CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability | Exploitation More Likely | No | 6.0 |
| CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.3 |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.2 |
| CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.4 |
| CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
| CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.6 |
CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability | Exploitation Less Likely | No | 4.5 |
| CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 9.3 |
| CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
| CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability | Exploitation Unlikely | No | 3.3 |
| CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-34349 | Windows Media Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50394 | Windows Media Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50415 | Windows Media Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability | N/A | No | 7.8 |
| CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.6 |
| CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
Microsoft Dynamics vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
Microsoft Office vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-50678 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.6 |
| CVE-2026-54988 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.1 |
| CVE-2026-48580 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50408 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55046 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55138 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55054 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-55122 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-55898 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.1 |
| CVE-2026-50675 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55899 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55948 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-58618 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-47642 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55024 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55025 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55031 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55048 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55029 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55039 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55041 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55136 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55141 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55036 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55044 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55037 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55058 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55137 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55053 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55131 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54131 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55947 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55949 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56156 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56193 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-55023 | Microsoft Office Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-55026 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
| CVE-2026-55027 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55028 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55047 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55035 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55057 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55042 | Microsoft Office Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-55139 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50665 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56192 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-56195 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55121 | Microsoft Office Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-47290 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50301 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50314 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50467 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55017 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55018 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55022 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55125 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55045 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-55049 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55129 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55056 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55140 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55133 | Microsoft OneNote Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55043 | Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55123 | Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55120 | Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Detected | No | 5.3 |
| CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Exploitation More Likely | No | 9.1 |
| CVE-2026-54108 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-55016 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-55019 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-55020 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-55021 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Unlikely | No | 7.3 |
| CVE-2026-55030 | Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 4.6 |
| CVE-2026-55034 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-55126 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-55135 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-56157 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 5.4 |
| CVE-2026-55050 | Microsoft Word Information Disclosure Vulnerability | N/A | No | 5.5 |
| CVE-2026-55124 | Microsoft Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55142 | Microsoft Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-55032 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55033 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55127 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55055 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55038 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55132 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55134 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55128 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55130 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
Open Source Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-40553 | Stack-based buffer overflow in gawk | n/a | No | |
| CVE-2026-40469 | Heap buffer overflow in gawk | n/a | No | |
| CVE-2026-40468 | Heap buffer overflow in gawk | n/a | No | |
| CVE-2026-40467 | Use after free in gawk | n/a | No | |
| CVE-2026-57968 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-57973 | Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability | Exploitation Less Likely | No | 6.3 |
Other vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-50663 | Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50510 | GitHub Copilot Remote Code Execution Vulnerability | N/A | No | 7.8 |
| CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-55145 | Outlook Copilot Tampering Vulnerability | N/A | No | 6.3 |
Server Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation More Likely | No | 9.6 |
SQL Server vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-56642 | Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-58647 | Microsoft PowerBI Report Server Spoofing Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-47296 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55002 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-47295 | Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50468 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-54116 | Microsoft SQL Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
System Center vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-50658 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56178 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50657 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-55011 | Microsoft Defender Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55012 | Microsoft Defender Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
Windows vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50682 | Active Directory Denial of Service Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-55001 | Active Directory Domain Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability | N/A | No | 4.8 |
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-50488 | Clipboard User Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability | N/A | No | 8.8 |
| CVE-2026-58633 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58634 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 6.3 |
| CVE-2026-50353 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49174 | DNS Client Tampering Vulnerability | Exploitation Unlikely | No | 6.1 |
| CVE-2026-50495 | DNS Client Tampering Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-57088 | Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
| CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-49162 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50305 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50361 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50466 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50458 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.4 |
| CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-58537 | Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.9 |
| CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-54111 | Universal Print Management Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-58543 | Universal Print Management Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.3 |
| CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.2 |
| CVE-2026-50416 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 3.3 |
| CVE-2026-56184 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-58529 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-58631 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-56196 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56197 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56169 | Windows Admin Center Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-57107 | Windows Admin Center Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56185 | Windows Admin Center Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-48572 | Windows App Package Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-48571 | Windows App Package Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50440 | Windows Audio Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | Exploitation Less Likely | Yes | 6.1 |
| CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution | Exploitation Less Likely | No | 8.0 |
| CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability | Exploitation More Likely | No | 6.0 |
| CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.3 |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50428 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 4.2 |
| CVE-2026-55144 | Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability | Exploitation Unlikely | No | 7.1 |
| CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.4 |
| CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
| CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50487 | Windows DNS Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-50465 | Windows DNS Client Tampering Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-49169 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-50424 | Windows Domain Controller Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-50483 | Windows Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability | Exploitation Less Likely | No | 4.5 |
| CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-54127 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-50315 | Windows Image Acquisition Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 4.7 |
| CVE-2026-49173 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 9.3 |
| CVE-2026-49808 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.2 |
CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability | Exploitation Unlikely | No | 3.3 |
| CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | Exploitation More Likely | No | 5.5 |
| CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability | Exploitation Less Likely | No | 8.2 |
| CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58602 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50393 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50396 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-58544 | Windows Management Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50404 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50336 | Windows Media Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50398 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-50414 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50379 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50676 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50677 | Windows Media Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-34349 | Windows Media Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50394 | Windows Media Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50415 | Windows Media Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58542 | Windows Media Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50342 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56183 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56187 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-56181 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Exploitation Less Likely | No | 8.3 |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50317 | Windows Operating Systems Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.0 |
| CVE-2026-49166 | Windows Print Configuration Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-44800 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-55014 | Windows Remote Help Defense Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-50501 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50323 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50345 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50322 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50340 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.5 |
| CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50403 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-50385 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-50413 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability | N/A | No | 7.8 |
| CVE-2026-50503 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58527 | Windows Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50679 | Windows Search Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability | Exploitation Less Likely | No | 5.3 |
| CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50392 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.8 |
| CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-50418 | Windows System Secure Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.1 |
| CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.1 |
| CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-55000 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.4 |
| CVE-2026-54991 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54996 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-49802 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-49806 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-50674 | Windows USB Print Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.6 |
| CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-50687 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50295 | Windows Zero Trust DNS Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
Zero-Day Vulnerabilities: Known Exploited
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.8 |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Detected | No | 5.3 |
Zero-Day Vulnerabilities: Publicly Disclosed (No known exploitation)
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | Exploitation Less Likely | Yes | 6.1 |
Critical RCEs
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-48561 | Microsoft Copilot Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation More Likely | No | 9.6 |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Exploitation More Likely | No | 9.1 |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 9.9 |
| CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.6 |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 9.3 |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days
15 July 2026 at 08:21
Just one month ago, June 2026 Patch Tuesday broke Microsoft’s previous record with 206 CVEs and three zero‑days. July now triples that count, reinforcing that the era of “small” Patch Tuesdays may be over as AI‑driven vulnerability discovery ramps up.
The update includes 59 critical vulnerabilities, as well as three publicly disclosed zero-days. Microsoft classifies these as zero-days because information about the vulnerabilities became public before patches were available. Two are known to be actively exploited by attackers.
How to apply patches and check if you’re protected
These updates fix security problems and keep your Windows PC protected. Here’s how to make sure you’re up to date:
1. Open Settings
- Click the Start button, then open Settings.
2. Go to Windows Update
- Select Windows Update (usually at the bottom of the menu on the left).
3. Check for updates
- Click Check for updates. Windows will search for the latest security updates.
- If you’ve enabled Get the latest updates as soon as they’re available under More options, you may be prompted to restart immediately. If so, restart your computer to complete the update. Otherwise, continue to the next step.
4. Download and install
- If updates are available, they’ll start downloading automatically. When they’re ready, click Install or Restart now if prompted. Your computer may need a restart to finish the update.
5. Double-check you’re up to date
- After restarting, go back to Windows Update and check again. If it says You’re up to date, you’re all set.
Technical details
Let’s look at the three zero-days.
First is a Windows BitLocker security feature bypass vulnerability, tracked as CVE-2026-50661. It is not known to be actively exploited. Microsoft describes it as:
“Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.”
In other words, even if you’ve encrypted your machine with BitLocker, an attacker could exploit this vulnerability to access your data if they have physical access to your computer.
Next is the actively exploited CVE-2026-56155, an Active Directory Federation Services (ADFS) elevation of privilege (EoP) vulnerability. ADFS is a Microsoft software component that provides single sign-on (SSO) and federated access. It acts as a trust broker between an organization’s Active Directory and applications. An attacker who successfully exploited this vulnerability could gain administrator privileges. Reportedly, Microsoft discovered the vulnerability while investigating active attacks.
Last but not least is CVE-2026-56164, a Microsoft SharePoint Server elevation of privilege vulnerability. SharePoint Server is the on-premises version of Microsoft’s web-based collaboration and document management platform. A missing authentication check in Microsoft Office SharePoint could allow an attacker to elevate privileges over a network.
Both actively exploited vulnerabilities have been added to the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog, which sets patch deadlines for Federal Civilian Executive Branch (FCEB) agencies. CISA has also urged organizations using SharePoint Server to implement hardening measures after the latest exploitations.
“One of the best cybersecurity suites on the planet.”
According to CNET. Read their review →
Microsoft’s Largest Patch Tuesday Fixes 622 Vulnerabilities, Two Under Active Attack
15 July 2026 at 04:57
