Every CVE in this month's Microsoft Security Update document, ranked by composite priority. Search by CVE, product, or owner; filter by status or source; click a column to sort. 996 Microsoft-authored, 287 Edge/Chromium and 732 Linux/other that patch via their own vendor.
132 rated Critical (Microsoft) and 28 rated Critical (everything else). The status filter below spans the whole document, so its Critical count is the combined 160.
| CVE | Status | CVSS | Severity | Impact | Owner | Source | Title |
|---|---|---|---|---|---|---|---|
| CVE-2026-81963 | Exploited | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2026-85880 | Exploited | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2026-85046 | Exploited | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-85046 Type confusion in V8 |
| CVE-2026-87491 | Exploited | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87491: Out of bounds write in V8 |
| CVE-2026-69730 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69854 | Critical worm | 9.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Spring Cloud Azure Elevation of Privilege Vulnerability |
| CVE-2026-69769 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows HTTP Print Provider Remote Code Execution Vulnerability |
| CVE-2026-69829 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Shell Remote Code Execution Vulnerability |
| CVE-2026-72982 | Critical worm | 9.8 | Critical | Remote Code Execution | Identity / AD | Microsoft | Windows Netlogon Remote Code Execution Vulnerability |
| CVE-2026-72983 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
| CVE-2026-73009 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-73010 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Failover Cluster Remote Code Execution Vulnerability |
| CVE-2026-70352 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure AI Language Elevation of Privilege Vulnerability |
| CVE-2026-83711 | Critical worm | 10.0 | Critical | Elevation of Privilege | Identity / AD | Microsoft | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability |
| CVE-2026-66302 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Skype for Business Remote Code Execution Vulnerability |
| CVE-2026-67631 | Critical worm | 9.8 | Critical | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67643 | Critical worm | 9.8 | Critical | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-69579 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-69590 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-69595 | Critical worm | 9.8 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
| CVE-2026-69845 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70296 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-72979 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-77493 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-78445 | Critical worm | 9.8 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
| CVE-2026-78509 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-78510 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Outlook and Word Remote Code Execution Vulnerability |
| CVE-2026-80098 | Critical worm | 9.3 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Copilot Studio Elevation of Privilege Vulnerability |
| CVE-2026-62916 | Critical worm | 9.1 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Entra ID Elevation of Privilege Vulnerability |
| CVE-2026-69676 | Critical | 8.8 | Critical | Remote Code Execution | Identity / AD | Microsoft | Windows Kerberos Remote Code Execution Vulnerability |
| CVE-2026-67378 | Critical worm | 9.0 | Critical | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67636 | Critical worm | 9.0 | Critical | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-72987 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Remote Code Execution Vulnerability |
| CVE-2026-69857 | Critical | 8.5 | Critical | Spoofing | Cloud / M365 apps | Microsoft | Azure Cosmos DB Spoofing Vulnerability |
| CVE-2026-62874 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Billing Elevation of Privilege Vulnerability |
| CVE-2026-69399 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-69843 | Critical worm | 10.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Fabric Elevation of Privilege Vulnerability |
| CVE-2026-69865 | Critical worm | 10.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Container Registry Elevation of Privilege Vulnerability |
| CVE-2026-70200 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Logic Apps Elevation of Privilege Vulnerability |
| CVE-2026-83944 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Logic Apps Elevation of Privilege Vulnerability |
| CVE-2026-85889 | Critical worm | 10.0 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure AI Foundry Elevation of Privilege Vulnerability |
| CVE-2026-69530 | Critical worm | 8.1 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-69813 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69827 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69858 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-72981 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | IP Helper Remote Code Execution Vulnerability |
| CVE-2026-77505 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-78444 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Failover Cluster Remote Code Execution Vulnerability |
| CVE-2026-78449 | Critical worm | 8.1 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-78450 | Critical worm | 8.1 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-70009 | Critical worm | 9.3 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-69852 | Critical | 7.5 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-83941 | Critical | 9.9 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Entra ID Elevation of Privilege Vulnerability |
| CVE-2026-77903 | Critical worm | 9.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Dataverse Elevation of Privilege Vulnerability |
| CVE-2026-65669 | Critical | 9.6 | Critical | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-69712 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Key Distribution Center Remote Code Execution Vulnerability |
| CVE-2026-68791 | Critical worm | 8.6 | Critical | Information Disclosure | Cloud / M365 apps | Microsoft | Azure Machine Learning Information Disclosure Vulnerability |
| CVE-2026-65772 | Critical | 8.8 | Critical | Remote Code Execution | Cloud / M365 apps | Microsoft | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
| CVE-2026-69285 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-69499 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-69518 | Critical | 8.8 | Critical | Remote Code Execution | Remote access / RDP | Microsoft | Windows Remote Desktop Remote Code Execution Vulnerability |
| CVE-2026-69601 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-69632 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-69649 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2026-69678 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-69767 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-69797 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-69860 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-70203 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Player Remote Code Execution Vulnerability |
| CVE-2026-70351 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WebP Image Extension Remote Code Execution Vulnerability |
| CVE-2026-70586 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Paint Remote Code Execution Vulnerability |
| CVE-2026-72950 | Critical | 8.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-72959 | Critical | 8.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-72960 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Player Remote Code Execution Vulnerability |
| CVE-2026-72986 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Graphic Fonts Remote Code Execution Vulnerability |
| CVE-2026-73006 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | DirectWrite Remote Code Execution Vulnerability |
| CVE-2026-73013 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-73018 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Graphic Fonts Remote Code Execution Vulnerability |
| CVE-2026-73023 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-77495 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-77504 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78439 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-78505 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-78519 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-78525 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-81352 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Web Media Extensions Remote Code Execution Vulnerability |
| CVE-2026-81952 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-81955 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-72957 | Critical | 7.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-65818 | Critical | 8.5 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Power Automate Elevation of Privilege Vulnerability |
| CVE-2026-70178 | Critical | 8.5 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Fabric Elevation of Privilege Vulnerability |
| CVE-2026-85878 | Critical | 9.9 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Database for PostgreSQL Elevation of Privilege Vulnerability |
| CVE-2026-85885 | Critical | 9.9 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Microsoft 365 Copilot Elevation of Privilege Vulnerability |
| CVE-2026-85917 | Critical worm | 7.5 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure AI Foundry Elevation of Privilege Vulnerability |
| CVE-2026-87701 | Critical | 9.6 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Cosmos DB Elevation of Privilege Vulnerability |
| CVE-2026-70585 | Critical | 7.0 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
| CVE-2026-72954 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-77898 | Critical | 7.5 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-62906 | Critical | 7.4 | Critical | Information Disclosure | Other / general Windows | Microsoft | Microsoft Discovery Studio Information Disclosure Vulnerability |
| CVE-2026-69603 | Critical | 8.8 | Critical | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-69740 | Critical | 8.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-69784 | Critical | 8.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-80083 | Critical | 8.8 | Critical | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-69820 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-69846 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-69874 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows ALPC Elevation of Privilege Vulnerability |
| CVE-2026-69906 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-72958 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Guard Elevation of Privilege Vulnerability |
| CVE-2026-72961 | Critical | 8.2 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-72962 | Critical | 8.2 | Critical | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-81354 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83939 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-83946 | Critical | 8.2 | Critical | Spoofing | Cloud / M365 apps | Microsoft | Azure Portal Spoofing Vulnerability |
| CVE-2026-78520 | Critical | 6.5 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-83501 | Critical | 5.5 | Critical | Information Disclosure | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability |
| CVE-2026-58599 | Critical | 7.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-69725 | Critical | 7.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-69799 | Critical | 7.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-69864 | Critical | 7.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-81948 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81949 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81950 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81951 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81953 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81959 | Critical | 7.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-83498 | Critical | 7.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-85887 | Critical | 7.7 | Critical | Information Disclosure | Cloud / M365 apps | Microsoft | M365 Copilot Information Disclosure Vulnerability |
| CVE-2026-69710 | Critical | 7.5 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-69890 | Critical | 7.5 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability |
| CVE-2026-73017 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Graphics Kernel Remote Code Execution Vulnerability |
| CVE-2026-81355 | Critical | 7.5 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
| CVE-2026-78501 | Critical | 7.4 | Critical | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability |
| CVE-2026-69501 | Critical | 7.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-85921 | Critical | 8.2 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-55946 | Critical | 6.1 | Critical | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Copilot Information Disclosure Vulnerability |
| CVE-2026-85504 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. |
| CVE-2026-85506 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). |
| CVE-2026-85507 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). |
| CVE-2026-85508 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). |
| CVE-2026-85509 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. |
| CVE-2026-34182 | Critical worm | 9.1 | Critical | — | Other / general Windows | Linux / other | CMS AuthEnvelopedData Processing May Accept Forged Messages |
| CVE-2026-89479 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | sctp: stop processing a packet once its association is deleted |
| CVE-2026-89551 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow |
| CVE-2026-89778 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | isofs: fix out-of-bounds page array access on empty zisofs block |
| CVE-2026-89783 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full |
| CVE-2026-89788 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ksmbd: fix tree connection use-after-free in smb2_tree_connect() |
| CVE-2026-89847 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | scsi: qla2xxx: Avoid double completion in async IOCB timeout |
| CVE-2026-89969 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU |
| CVE-2026-89970 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | nvmet-auth: Synchronize timeout work during SQ teardown |
| CVE-2026-89972 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | nvme: add missing SRCU grace period in error path |
| CVE-2026-90036 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | NFSD: Prevent client use-after-free during blocked-lock reaping |
| CVE-2026-90037 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | NFSD: Prevent client use-after-free during close_lru reaping |
| CVE-2026-90042 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ceph: properly decrypt filenames in vmalloc() buffers |
| CVE-2026-90048 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() |
| CVE-2026-72980 | Critical | 4.4 | Critical | Security Feature Bypass | Other / general Windows | Microsoft | Windows Hello Security Feature Bypass Vulnerability |
| CVE-2026-89542 | Critical worm | 9.4 | Critical | — | Other / general Windows | Linux / other | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens |
| CVE-2026-89526 | Critical worm | 9.1 | Critical | — | Other / general Windows | Linux / other | svcrdma: Validate Read chunk positions before reconstruction |
| CVE-2026-89631 | Critical worm | 9.1 | Critical | — | Network / infra servers | Linux / other | smb: client: reject a tree connect response whose byte count is too small |
| CVE-2026-89653 | Critical worm | 9.1 | Critical | — | Other / general Windows | Linux / other | ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode |
| CVE-2026-91749 | Critical | 9.6 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91749: Use after free |
| CVE-2026-91721 | Critical | 8.8 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91721: Use after free |
| CVE-2026-91726 | Critical | 4.7 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91726: Out of bounds read |
| CVE-2026-77405 | Critical | — | Critical | — | Other / general Windows | Linux / other | RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser |
| CVE-2026-89422 | Critical | — | Critical | — | Other / general Windows | Linux / other | TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension |
| CVE-2026-69525 | Normal worm | 9.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-70342 | Normal worm | 8.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-72936 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows SMB Client Remote Code Execution Vulnerability |
| CVE-2026-69408 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-69431 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Telnet Client Remote Code Execution Vulnerability |
| CVE-2026-69463 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-69715 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Direct Show Remote Code Execution Vulnerability |
| CVE-2026-73025 | Normal worm | 9.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows iSCSI Security Feature Bypass Vulnerability |
| CVE-2026-68839 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability |
| CVE-2026-69276 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability |
| CVE-2026-69491 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-69493 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-69496 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Compressed Folder Remote Code Execution Vulnerability |
| CVE-2026-69586 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows PDF Remote Code Execution Vulnerability |
| CVE-2026-69768 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows RNDIS Remote Code Execution Vulnerability |
| CVE-2026-69819 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-69824 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Standard XPS Remote Code Execution Vulnerability |
| CVE-2026-69910 | Normal worm | 9.8 | Important | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-72940 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Schannel Remote Code Execution Vulnerability |
| CVE-2026-68876 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-68880 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69301 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69623 | Normal | 8.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows HTTP Print Provider Remote Code Execution Vulnerability |
| CVE-2026-69714 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-47297 | Normal worm | 8.1 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-55007 | Normal worm | 8.1 | Important | Remote Code Execution | Exchange / mail | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-69325 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft JScript Remote Code Execution Vulnerability |
| CVE-2026-69438 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft JScript Remote Code Execution Vulnerability |
| CVE-2026-69510 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69524 | Normal worm | 8.1 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-69546 | Normal worm | 8.1 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-69620 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69680 | Normal worm | 8.1 | Important | Spoofing | Network / infra servers | Microsoft | Windows DNS Spoofing Vulnerability |
| CVE-2026-69732 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
| CVE-2026-69782 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69786 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-69989 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-83997 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-57098 | Normal worm | 7.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability |
| CVE-2026-57099 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-66304 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Skype for Business Information Disclosure Vulnerability |
| CVE-2026-66307 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Skype for Business and Lync Denial of Service Vulnerability |
| CVE-2026-67376 | Normal worm | 7.5 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-68887 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Denial of Service Vulnerability |
| CVE-2026-69329 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | BranchCache Denial of Service Vulnerability |
| CVE-2026-69342 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-69378 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Microsoft Exchange Server Denial of Service Vulnerability |
| CVE-2026-69428 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability |
| CVE-2026-69443 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability |
| CVE-2026-69587 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-69588 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-69631 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-69744 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Kerberos Denial of Service Vulnerability |
| CVE-2026-69760 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Kerberos Denial of Service Vulnerability |
| CVE-2026-69793 | Normal worm | 7.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Windows TCP/IP Security Feature Bypass Vulnerability |
| CVE-2026-69809 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-69881 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-70065 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-70579 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Mobile Broadband Information Disclosure Vulnerability |
| CVE-2026-70587 | Normal worm | 7.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Protocol Information Disclosure Vulnerability |
| CVE-2026-71330 | Normal worm | 7.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
| CVE-2026-72932 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
| CVE-2026-72949 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability |
| CVE-2026-72989 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Failover Cluster Information Disclosure Vulnerability |
| CVE-2026-77494 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77498 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77499 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77501 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77502 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77886 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77888 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77889 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77890 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77893 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-77895 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-83989 | Normal worm | 7.5 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability |
| CVE-2026-84001 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Key Distribution Center Denial of Service Vulnerability |
| CVE-2026-18329 | Normal worm | 8.2 | Moderate | — | Other / general Windows | Microsoft | NGINX ngx_http_js_module vulnerability |
| CVE-2026-84003 | Normal worm | 7.4 | Important | Spoofing | Other / general Windows | Microsoft | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability |
| CVE-2026-81376 | Normal | 9.6 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-68846 | Normal | 7.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69274 | Normal | 7.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69305 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69337 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Registry Elevation of Privilege Vulnerability |
| CVE-2026-69364 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-69366 | Normal | 7.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69451 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-69460 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-69757 | Normal | 7.1 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-69356 | Normal | 9.3 | Important | Spoofing | Exchange / mail | Microsoft | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-69641 | Normal | 9.1 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-69777 | Normal | 8.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-78222 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Microsoft | NGINX ngx_http_js_module vulnerability |
| CVE-2026-62706 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-62744 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-62895 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability |
| CVE-2026-66814 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-66818 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-66819 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-66820 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67368 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67370 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67373 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67380 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67381 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67384 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67385 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67388 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67638 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67639 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67642 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68775 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68786 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68828 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69266 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69268 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69273 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69282 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69291 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
| CVE-2026-69334 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
| CVE-2026-69355 | Normal | 8.8 | Important | Remote Code Execution | Exchange / mail | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-69360 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69386 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-69434 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows URL Moniker Remote Code Execution Vulnerability |
| CVE-2026-69439 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2026-69442 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-69461 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-69464 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-69465 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69485 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69494 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-69495 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-69511 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-69522 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-69529 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-69547 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69551 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69556 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69598 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69614 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-69628 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69629 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-69669 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Kernel Remote Code Execution Vulnerability |
| CVE-2026-69671 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69686 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69716 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-69722 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69724 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69729 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Credential Providers Remote Code Execution Vulnerability |
| CVE-2026-69742 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Publisher Remote Code Execution Vulnerability |
| CVE-2026-69759 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69764 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69772 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Network File System Remote Code Execution Vulnerability |
| CVE-2026-69778 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-71328 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-71336 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Work Folder Service Remote Code Execution Vulnerability |
| CVE-2026-71352 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Remote Code Execution Vulnerability |
| CVE-2026-72933 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-72972 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-72973 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-73012 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Services Elevation of Privilege Vulnerability |
| CVE-2026-73016 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | DirectWrite Remote Code Execution Vulnerability |
| CVE-2026-73028 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-77480 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-77481 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-77482 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-77483 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-77484 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-77486 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-77487 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-77901 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-77906 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-77907 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-77908 | Normal | 8.8 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
| CVE-2026-78442 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows OLE DB Remote Code Execution Vulnerability |
| CVE-2026-78456 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | SQL Server Remote Code Execution Vulnerability |
| CVE-2026-78462 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-78463 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-78504 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78507 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78511 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78512 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78514 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78517 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78518 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-78521 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-78524 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-78526 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-80074 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-80077 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-80080 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-80081 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-80085 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-80096 | Normal | 8.8 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-81385 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Publisher Remote Code Execution Vulnerability |
| CVE-2026-83992 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-83998 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-85877 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Print Spooler Remote Code Execution Vulnerability |
| CVE-2026-69277 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
| CVE-2026-69391 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability |
| CVE-2026-69436 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69450 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69459 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
| CVE-2026-69467 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-69478 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69585 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69921 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-70289 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70583 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Core Messaging Elevation of Privilege Vulnerability |
| CVE-2026-71343 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Remote Code Execution Vulnerability |
| CVE-2026-77500 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69642 | Normal worm | 6.5 | Important | Spoofing | Other / general Windows | Microsoft | Skype for Business Spoofing Vulnerability |
| CVE-2026-67379 | Normal | 8.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-81356 | Normal | 8.2 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-81357 | Normal | 8.2 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-81378 | Normal | 8.2 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-81379 | Normal | 8.2 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-69723 | Normal | 5.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-69304 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-69382 | Normal worm | 5.9 | Important | Information Disclosure | Exchange / mail | Microsoft | Microsoft Exchange Server Information Disclosure Vulnerability |
| CVE-2026-69803 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-69929 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-69930 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-70091 | Normal worm | 5.9 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70124 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-72978 | Normal worm | 5.9 | Important | Denial of Service | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-78523 | Normal worm | 5.9 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Server Denial of Service Vulnerability |
| CVE-2026-69380 | Normal | 8.1 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-70563 | Normal | 8.1 | Important | Spoofing | Other / general Windows | Microsoft | Windows Shell Spoofing Vulnerability |
| CVE-2026-68827 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows GDI+ Elevation of Privilege Vulnerability |
| CVE-2026-68834 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-68838 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-68878 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Fast FAT Driver Elevation of Privilege Vulnerability |
| CVE-2026-68894 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69271 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69322 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69332 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69346 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-69365 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
| CVE-2026-69371 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69418 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Volume Manager Driver Elevation of Privilege Vulnerability |
| CVE-2026-69423 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-69427 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
| CVE-2026-69458 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-69462 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69481 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Enterprise App Management Elevation of Privilege Vulnerability |
| CVE-2026-69503 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-69505 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69512 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69619 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-69625 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-69643 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69689 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69717 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-69727 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69762 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69773 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69807 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | PowerShell Elevation of Privilege Vulnerability |
| CVE-2026-69826 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69875 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83948 | Normal | 8.0 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Microsoft Azure CLI Remote Code Execution Vulnerability |
| CVE-2026-68884 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69310 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-69385 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-69466 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69473 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69498 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69600 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69605 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Install Service Elevation of Privilege Vulnerability |
| CVE-2026-69779 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69911 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70562 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-71340 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File History Service Elevation of Privilege Vulnerability |
| CVE-2026-80093 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-77909 | Normal | 7.7 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure CycleCloud Information Disclosure Vulnerability |
| CVE-2026-62813 | Normal | 7.5 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-69397 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-69429 | Normal | 7.5 | Important | Remote Code Execution | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
| CVE-2026-69514 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69539 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69599 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69607 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-69804 | Normal | 7.5 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69805 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-72928 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-72943 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-78461 | Normal | 7.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-81383 | Normal | 7.4 | Important | Information Disclosure | Other / general Windows | Microsoft | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-69486 | Normal | 8.8 | Important | Remote Code Execution | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-70125 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2026-83996 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-85893 | Normal | 8.8 | Important | Elevation of Privilege | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-69402 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-69417 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-81349 | Normal | 7.2 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure HDInsight Ambari Elevation of Privilege Vulnerability |
| CVE-2026-80097 | Normal | 8.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Authenticator Elevation of Privilege Vulnerability |
| CVE-2026-66305 | Normal | 7.1 | Important | Spoofing | Other / general Windows | Microsoft | Skype for Business Spoofing Vulnerability |
| CVE-2026-68835 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-68889 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-68893 | Normal | 7.1 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Remote Desktop Licensing Service Elevation of Privilege Vulnerability |
| CVE-2026-69272 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69296 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69313 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69314 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Broker Service Elevation of Privilege Vulnerability |
| CVE-2026-69336 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69338 | Normal | 7.1 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
| CVE-2026-69340 | Normal | 7.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69357 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NDIS Elevation of Privilege Vulnerability |
| CVE-2026-69358 | Normal | 7.1 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69396 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NDIS Elevation of Privilege Vulnerability |
| CVE-2026-69536 | Normal | 7.1 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69553 | Normal | 7.1 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-69597 | Normal | 7.1 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-69602 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
| CVE-2026-69688 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-69706 | Normal | 7.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69761 | Normal | 7.1 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-69775 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-69479 | Normal | 8.4 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-69638 | Normal | 8.4 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-77503 | Normal | 8.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69646 | Normal | 8.3 | Important | Spoofing | Other / general Windows | Microsoft | Skype for Business Spoofing Vulnerability |
| CVE-2026-65812 | Normal | 6.8 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Teams for Android Information Disclosure Vulnerability |
| CVE-2026-69415 | Normal | 6.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-69832 | Normal | 5.6 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-69412 | Normal | 8.0 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69847 | Normal | 8.0 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69876 | Normal | 8.0 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-58649 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | .NET Information Disclosure Vulnerability |
| CVE-2026-62762 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-62801 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-63523 | Normal | 6.5 | Important | Spoofing | Other / general Windows | Microsoft | Skype for Business Spoofing Vulnerability |
| CVE-2026-64918 | Normal | 6.5 | Important | Spoofing | Office / productivity | Microsoft | Microsoft Office Spoofing Vulnerability |
| CVE-2026-66303 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Skype for Business and Lync Denial of Service Vulnerability |
| CVE-2026-66306 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Skype for Business Information Disclosure Vulnerability |
| CVE-2026-66308 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Skype for Business and Lync Denial of Service Vulnerability |
| CVE-2026-66816 | Normal | 6.5 | Important | Security Feature Bypass | Database / SQL | Microsoft | Microsoft SQL Server Security Feature Bypass Vulnerability |
| CVE-2026-67369 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67383 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67386 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67389 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67390 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67393 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67624 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67629 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67630 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67633 | Normal | 6.5 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-67641 | Normal | 6.5 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-67645 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67648 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68776 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68777 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68778 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68779 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68780 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68781 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68784 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68898 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows iSCSI Denial of Service Vulnerability |
| CVE-2026-69297 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-69361 | Normal | 6.5 | Important | Spoofing | Exchange / mail | Microsoft | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-69374 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-69375 | Normal | 6.5 | Important | Tampering | Exchange / mail | Microsoft | Microsoft Exchange Server Tampering Vulnerability |
| CVE-2026-69395 | Normal | 6.5 | Important | Information Disclosure | Identity / AD | Microsoft | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability |
| CVE-2026-69409 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-69497 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-69562 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-69624 | Normal | 6.5 | Important | Tampering | Identity / AD | Microsoft | Active Directory Certificate Services (AD CS) Tampering Vulnerability |
| CVE-2026-69626 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-69636 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-69683 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-69719 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-69734 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-69739 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-69839 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows iSCSI Target Service Denial of Service Vulnerability |
| CVE-2026-70019 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Compressed Folder Information Disclosure Vulnerability |
| CVE-2026-72938 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-72939 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-72942 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-72956 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-72974 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-72975 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-72977 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-73029 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-77896 | Normal | 6.5 | Important | Denial of Service | Remote access / RDP | Microsoft | Windows Remote Desktop Client Denial of Service Vulnerability |
| CVE-2026-77911 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-78441 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows OLE DB Information Disclosure Vulnerability |
| CVE-2026-78453 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
| CVE-2026-78502 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-78503 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-78515 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-78522 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-80073 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-80076 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-80078 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-80079 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-80082 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-80084 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-80086 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-80087 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-80088 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-80089 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-80090 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-80091 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-81377 | Normal | 6.5 | Important | Tampering | Other / general Windows | Microsoft | Visual Studio Code Tampering Vulnerability |
| CVE-2026-81381 | Normal | 6.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-69406 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-78454 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Information Disclosure Vulnerability |
| CVE-2026-56172 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows VHD miniport driver Elevation of Privilege Vulnerability |
| CVE-2026-56177 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Server Elevation of Privilege Vulnerability |
| CVE-2026-56198 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Trace Data Helper Elevation of Privilege Vulnerability |
| CVE-2026-58600 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HEVC Video Extensions Elevation of Privilege Vulnerability |
| CVE-2026-58611 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Xbox Gaming Services Elevation of Privilege Vulnerability |
| CVE-2026-62697 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-62804 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-62810 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability |
| CVE-2026-68787 | Normal | 7.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68832 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-68841 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-68844 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Remote Code Execution Vulnerability |
| CVE-2026-68845 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-68848 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-68850 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Account Elevation of Privilege Vulnerability |
| CVE-2026-68875 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-68877 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Remote Code Execution Vulnerability |
| CVE-2026-68885 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-68888 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-68890 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-68892 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-68896 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69265 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69269 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69270 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69283 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-69284 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DCOM Server Elevation of Privilege Vulnerability |
| CVE-2026-69289 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-69290 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-69293 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69295 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-69298 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69307 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69312 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69323 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69324 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Performance Monitor Elevation of Privilege Vulnerability |
| CVE-2026-69328 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69348 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69352 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69359 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2026-69368 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69377 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-69389 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Management Provider Elevation of Privilege Vulnerability |
| CVE-2026-69392 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-69407 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Volume Manager Driver Elevation of Privilege Vulnerability |
| CVE-2026-69420 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
| CVE-2026-69421 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-69424 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-69426 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows VOLSNAP.SYS Remote Code Execution Vulnerability |
| CVE-2026-69432 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Volume Manager Driver Elevation of Privilege Vulnerability |
| CVE-2026-69433 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69444 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Speech Elevation of Privilege Vulnerability |
| CVE-2026-69445 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Compressed Folder Elevation of Privilege Vulnerability |
| CVE-2026-69447 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69455 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-69456 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Speech Elevation of Privilege Vulnerability |
| CVE-2026-69475 | Normal | 7.8 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-69476 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69480 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-69489 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69508 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-69509 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Role: Windows Fax Service Elevation of Privilege Vulnerability |
| CVE-2026-69513 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69528 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-69532 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69534 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-69535 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69538 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-69542 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-69544 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-69561 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-69571 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69576 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Graphic Fonts Elevation of Privilege Vulnerability |
| CVE-2026-69580 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69582 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-69583 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69584 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-69589 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69592 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-69593 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69594 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
| CVE-2026-69604 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69608 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-69612 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69685 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-69687 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69691 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69707 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69709 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-69720 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-69731 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-69738 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69758 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-69785 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-69787 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-69790 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Providers Elevation of Privilege Vulnerability |
| CVE-2026-69801 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69821 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability |
| CVE-2026-69822 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-69841 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-69844 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69900 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69907 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Enterprise App Management Elevation of Privilege Vulnerability |
| CVE-2026-70334 | Normal | 7.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-70564 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-70569 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-70572 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-70581 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-70584 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Core Messaging Elevation of Privilege Vulnerability |
| CVE-2026-71334 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NFS Portmapper Elevation of Privilege Vulnerability |
| CVE-2026-71337 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Management Provider Elevation of Privilege Vulnerability |
| CVE-2026-71345 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-72929 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-72941 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72944 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Role: Windows Fax Service Elevation of Privilege Vulnerability |
| CVE-2026-72946 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-72953 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-72965 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows WebClient Service Elevation of Privilege Vulnerability |
| CVE-2026-72967 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2026-72988 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72990 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72991 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72992 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72993 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72994 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72995 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72996 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-72997 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73000 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73001 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73002 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73007 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73011 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73014 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Data Sharing Service Client Elevation of Privilege Vulnerability |
| CVE-2026-73015 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73020 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73021 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-73024 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability |
| CVE-2026-73026 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-77489 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-77904 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-78447 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-78448 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-80075 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Work Folders Elevation of Privilege Vulnerability |
| CVE-2026-81353 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | HEIF Image Extensions Remote Code Execution Vulnerability |
| CVE-2026-81386 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81388 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81396 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81397 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81398 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81947 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81954 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81956 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81957 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-81960 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-83942 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83952 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-83954 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83955 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83967 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83968 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83969 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83970 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83971 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83972 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83973 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83974 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83975 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83976 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83977 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83978 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83979 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83980 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83981 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83982 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83983 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83985 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83986 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83987 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83988 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-83990 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-83995 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-84000 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-62759 | Normal | 7.5 | Important | Spoofing | Identity / AD | Microsoft | Windows Netlogon Spoofing Vulnerability |
| CVE-2026-70570 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-69347 | Normal | 7.4 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Fast FAT Driver Remote Code Execution Vulnerability |
| CVE-2026-69477 | Normal | 7.3 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-69559 | Normal | 5.8 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Teams for Android Information Disclosure Vulnerability |
| CVE-2026-68874 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability |
| CVE-2026-69317 | Normal | 5.7 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-69349 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-69372 | Normal | 5.7 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Network File System Denial of Service Vulnerability |
| CVE-2026-69393 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-69507 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-69552 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-69569 | Normal | 5.7 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Print Spooler Components Denial of Service Vulnerability |
| CVE-2026-69572 | Normal | 5.7 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows SMB Client Information Disclosure Vulnerability |
| CVE-2026-69591 | Normal | 5.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-69384 | Normal | 7.1 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability |
| CVE-2026-69482 | Normal | 7.1 | Important | Tampering | Other / general Windows | Microsoft | Windows Error Reporting Tampering Vulnerability |
| CVE-2026-50349 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-62694 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-68824 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-68825 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-68837 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File History Service Elevation of Privilege Vulnerability |
| CVE-2026-68840 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-68847 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-68897 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Standard XPS Elevation of Privilege Vulnerability |
| CVE-2026-69275 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69279 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-69280 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-69281 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows License Manager Elevation of Privilege Vulnerability |
| CVE-2026-69287 | Normal | 7.0 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-69292 | Normal | 7.0 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
| CVE-2026-69299 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft COM for Windows Elevation of Privilege Vulnerability |
| CVE-2026-69300 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-69309 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-69311 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69319 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-69331 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-69333 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69335 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69341 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-69362 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69379 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69383 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-69388 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-69394 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69398 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-69401 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability |
| CVE-2026-69404 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-69410 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69413 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69422 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-69430 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Embedded Mode Service Elevation of Privilege Vulnerability |
| CVE-2026-69440 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-69441 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-69448 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-69468 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-69470 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-69472 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Devices Human Interface Elevation of Privilege Vulnerability |
| CVE-2026-69488 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69492 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-69500 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-69516 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-69517 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Wireless Networking Elevation of Privilege Vulnerability |
| CVE-2026-69540 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69560 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2026-69563 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-69564 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability |
| CVE-2026-69567 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69573 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-69574 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69575 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-69578 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69581 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69606 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-69610 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69613 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-69617 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-69621 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Role: Windows Fax Service Elevation of Privilege Vulnerability |
| CVE-2026-69630 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69645 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-69648 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Notification Elevation of Privilege Vulnerability |
| CVE-2026-69652 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69654 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Accounts Control Elevation of Privilege Vulnerability |
| CVE-2026-69682 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Host Guardian Service Elevation of Privilege Vulnerability |
| CVE-2026-69692 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-69693 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Broker Service Elevation of Privilege Vulnerability |
| CVE-2026-69694 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability |
| CVE-2026-69708 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Web Platform Storage Elevation of Privilege Vulnerability |
| CVE-2026-69711 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69735 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-69791 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69806 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-69814 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Providers Elevation of Privilege Vulnerability |
| CVE-2026-69816 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Accounts Control Elevation of Privilege Vulnerability |
| CVE-2026-69817 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-69818 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-69834 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows ALPC Elevation of Privilege Vulnerability |
| CVE-2026-69838 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-69859 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69866 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-69889 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-69891 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-69896 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-70283 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70565 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability |
| CVE-2026-70567 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Display Enhancement Service Elevation of Privilege Vulnerability |
| CVE-2026-70568 | Normal | 7.0 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Windows Defender Firewall Service Elevation of Privilege Vulnerability |
| CVE-2026-70573 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-70577 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-70578 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Guard Elevation of Privilege Vulnerability |
| CVE-2026-71332 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
| CVE-2026-71333 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-71342 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-71351 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-71353 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-72926 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-72930 | Normal | 7.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-72952 | Normal | 7.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-72963 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Execution Server Elevation of Privilege Vulnerability |
| CVE-2026-73003 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-73005 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Authentication Methods Elevation of Privilege Vulnerability |
| CVE-2026-73022 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-77485 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-77894 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-77897 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability |
| CVE-2026-77899 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Center Elevation of Privilege Vulnerability |
| CVE-2026-77905 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-78457 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Health Service Elevation of Privilege Vulnerability |
| CVE-2026-78464 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-81389 | Normal | 7.0 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-83940 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-83999 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
| CVE-2026-85360 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-68833 | Normal | 6.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-69490 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-69566 | Normal | 6.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-71329 | Normal | 6.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-71348 | Normal | 6.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-71349 | Normal | 6.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-71350 | Normal | 6.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-72985 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Volume Shadow Copy Elevation of Privilege Vulnerability |
| CVE-2026-72999 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Hub Driver Elevation of Privilege Vulnerability |
| CVE-2026-77892 | Normal | 6.8 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows Boot Manager Elevation of Privilege Vulnerability |
| CVE-2026-78451 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
| CVE-2026-70575 | Normal | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Schannel Denial of Service Vulnerability |
| CVE-2026-78446 | Normal | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Denial of Service Vulnerability |
| CVE-2026-81380 | Normal | 5.3 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-69350 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69373 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69449 | Normal | 6.7 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows BitLocker Remote Code Execution Vulnerability |
| CVE-2026-71339 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-72927 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winsock Elevation of Privilege Vulnerability |
| CVE-2026-72935 | Normal | 6.7 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-72948 | Normal | 6.7 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-88097 | Normal | 8.1 | Important | Elevation of Privilege | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-69469 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-69267 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability |
| CVE-2026-69781 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Client Denial of Service Vulnerability |
| CVE-2026-69878 | Normal | 6.4 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70582 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-71338 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Failover Cluster Elevation of Privilege Vulnerability |
| CVE-2026-72947 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File History Service Elevation of Privilege Vulnerability |
| CVE-2026-77887 | Normal | 6.4 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-77891 | Normal | 6.4 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-68785 | Normal | 4.9 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-85892 | Normal | 7.8 | Important | Elevation of Privilege | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2026-69474 | Normal | 4.8 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-77490 | Normal | 6.1 | Moderate | Spoofing | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-69690 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-73019 | Normal | 4.3 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows URL Moniker Security Feature Bypass Vulnerability |
| CVE-2026-69405 | Normal | 5.7 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-69416 | Normal | 5.7 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-69637 | Normal | 5.7 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-69679 | Normal | 5.7 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-19774 | Normal | 7.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-68830 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability |
| CVE-2026-68831 | Normal | 5.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Windows Defender Firewall Service Information Disclosure Vulnerability |
| CVE-2026-68842 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows MIDI Service Module Information Disclosure Vulnerability |
| CVE-2026-68843 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-68851 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-68852 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Account Information Disclosure Vulnerability |
| CVE-2026-68873 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability |
| CVE-2026-68881 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-68886 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Network Connection Broker Information Disclosure Vulnerability |
| CVE-2026-68895 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Internet Storage Name Service Information Disclosure Vulnerability |
| CVE-2026-69286 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Audio Class Driver Information Disclosure Vulnerability |
| CVE-2026-69288 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2026-69294 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft COM for Windows Information Disclosure Vulnerability |
| CVE-2026-69303 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Push Message Routing Service Information Disclosure Vulnerability |
| CVE-2026-69308 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-69315 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows License Manager Information Disclosure Vulnerability |
| CVE-2026-69318 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Imaging Component Information Disclosure Vulnerability |
| CVE-2026-69321 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Power Dependency Coordinator Tampering Vulnerability |
| CVE-2026-69339 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows MIDI Service Module Information Disclosure Vulnerability |
| CVE-2026-69343 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-69344 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-69345 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-69351 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability |
| CVE-2026-69353 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Text Shaping Information Disclosure Vulnerability |
| CVE-2026-69367 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-69369 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-69376 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-69390 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-69403 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows SMB Server Information Disclosure Vulnerability |
| CVE-2026-69453 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft Windows Search Component Tampering Vulnerability |
| CVE-2026-69457 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Driver Information Disclosure Vulnerability |
| CVE-2026-69504 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-69527 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability |
| CVE-2026-69531 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft Windows Speech Tampering Vulnerability |
| CVE-2026-69554 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft Windows Search Component Tampering Vulnerability |
| CVE-2026-69568 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Storage Spaces Controller Information Disclosure Vulnerability |
| CVE-2026-69609 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-69616 | Normal | 5.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Services Information Disclosure Vulnerability |
| CVE-2026-69618 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows SMB Client Information Disclosure Vulnerability |
| CVE-2026-69627 | Normal | 5.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability |
| CVE-2026-69672 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-69674 | Normal | 5.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability |
| CVE-2026-69684 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Error Reporting Information Disclosure Vulnerability |
| CVE-2026-69741 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-69770 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-69794 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
| CVE-2026-69808 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-69862 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability |
| CVE-2026-70145 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-70290 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-71341 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Information Disclosure Vulnerability |
| CVE-2026-72937 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Information Disclosure Vulnerability |
| CVE-2026-72945 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Task Scheduler Information Disclosure Vulnerability |
| CVE-2026-72964 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Tampering Vulnerability |
| CVE-2026-72966 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Tampering Vulnerability |
| CVE-2026-73004 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Autopilot Tampering Vulnerability |
| CVE-2026-73008 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Biometric Service Information Disclosure Vulnerability |
| CVE-2026-77488 | Normal | 5.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-77491 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-77492 | Normal | 5.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Information Disclosure Vulnerability |
| CVE-2026-78506 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-78513 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-81387 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81390 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81391 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81392 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81393 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81394 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81395 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81399 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81400 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81401 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-81958 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2026-83949 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-83951 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-83991 | Normal | 5.5 | Important | Tampering | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Tampering Vulnerability |
| CVE-2026-85875 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-72976 | Normal | 5.0 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-69615 | Normal | 3.5 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-69904 | Normal | 3.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-68849 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Bluetooth Port Driver Information Disclosure Vulnerability |
| CVE-2026-68891 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Standard XPS Information Disclosure Vulnerability |
| CVE-2026-69316 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-69425 | Normal | 4.7 | Important | Tampering | Endpoints / Windows client | Microsoft | Windows NTFS Tampering Vulnerability |
| CVE-2026-69483 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Image Acquisition Information Disclosure Vulnerability |
| CVE-2026-69771 | Normal | 4.7 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Container Manager Service Security Feature Bypass Vulnerability |
| CVE-2026-69792 | Normal | 4.7 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows Win32K Security Feature Bypass Vulnerability |
| CVE-2026-69853 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-69895 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Spaceport.sys Information Disclosure Vulnerability |
| CVE-2026-72931 | Normal | 4.7 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
| CVE-2026-69381 | Normal | 4.6 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Information Disclosure Vulnerability |
| CVE-2026-69548 | Normal | 4.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows RNDIS Information Disclosure Vulnerability |
| CVE-2026-78452 | Normal | 4.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
| CVE-2026-78508 | Normal | 4.6 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Information Disclosure Vulnerability |
| CVE-2026-69713 | Normal | 4.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-78455 | Normal | 4.3 | Important | Information Disclosure | Other / general Windows | Microsoft | Xbox Information Disclosure Vulnerability |
| CVE-2026-78516 | Normal | 4.3 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storage Information Disclosure Vulnerability |
| CVE-2026-89779 | Normal worm | 9.1 | Important | — | Other / general Windows | Linux / other | fs/ntfs3: validate ef->size covers the record's name and value |
| CVE-2026-89786 | Normal worm | 9.1 | Important | — | Other / general Windows | Linux / other | ext4: fix out-of-bounds read in ext4_read_inline_dir() |
| CVE-2026-90011 | Normal worm | 9.1 | Important | — | Other / general Windows | Linux / other | scsi: target: iscsi: Reserve a terminator byte for the login payload |
| CVE-2026-90413 | Normal worm | 9.1 | Important | — | Other / general Windows | Linux / other | IB/isert: reject login PDUs declaring more data than was received |
| CVE-2026-44950 | Normal worm | 9.0 | Important | — | Other / general Windows | Linux / other | fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 |
| CVE-2026-59679 | Normal worm | 9.0 | Important | — | Other / general Windows | Linux / other | fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 |
| CVE-2026-86145 | Normal worm | 8.2 | Important | — | Other / general Windows | Linux / other | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). |
| CVE-2026-78689 | Normal worm | 8.1 | Important | — | Other / general Windows | Linux / other | NGINX ngx_http_js_module vulnerablility |
| CVE-2026-80792 | Normal worm | 8.1 | Important | — | Other / general Windows | Linux / other | ipv6: fix use-after-free in ip6_finish_output2() |
| CVE-2026-14957 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | FIPS mode assertion failure via malicious CERT payload |
| CVE-2026-33630 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP |
| CVE-2026-56855 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh |
| CVE-2026-78662 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh |
| CVE-2026-80788 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations |
| CVE-2026-80789 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | nvmet-tcp: bound SGL data length before allocating command buffers |
| CVE-2026-84304 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation |
| CVE-2026-85505 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). |
| CVE-2025-70873 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Linux / other | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. |
| CVE-2026-80791 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | nvmet-auth: zero the AUTH_RECEIVE response buffer |
| CVE-2026-85393 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding |
| CVE-2026-85396 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix |
| CVE-2026-82209 | Normal worm | 8.2 | Important | — | Other / general Windows | Linux / other | domain-scoped PSL domain cookie |
| CVE-2026-80837 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | netfilter: nf_tables: don't queue packet path object notifications |
| CVE-2026-80840 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | ipv6: seg6: clear IPv4 control block on IPIP decapsulation |
| CVE-2026-85091 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate |
| CVE-2026-82208 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | wolfSSL CA-cache hit overrides callback |
| CVE-2026-89861 | Normal worm | 8.1 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() |
| CVE-2026-61548 | Normal worm | 8.1 | Important | — | Other / general Windows | Linux / other | Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data |
| CVE-2026-69541 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-19499 | Normal worm | 7.7 | Important | — | Other / general Windows | Linux / other | Buffer overflow in strfmon and strfmon_l right-justification padding |
| CVE-2026-19666 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path |
| CVE-2026-19667 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` |
| CVE-2026-69184 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Linux / other | c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains |
| CVE-2026-76163 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | named aborts on a TKEY query when the user configuration has no global options statement |
| CVE-2026-78130 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. |
| CVE-2026-78132 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. |
| CVE-2026-80229 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | OpenSSL provider use-after-free |
| CVE-2026-80274 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Validating resolver can abort while caching a mismatched NOQNAME proof |
| CVE-2026-81563 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | SVCB AliasMode additional-data error leaks qpcache references |
| CVE-2026-81634 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Possible heap buffer overflow during DNSSEC canonicalization |
| CVE-2026-89477 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | sctp: fix NULL deref on untransmitted RECONF completion |
| CVE-2026-89528 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | svcrdma: Reject Read lists that exceed the page budget |
| CVE-2026-89532 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | svcrdma: Fix pcl_for_each_segment for empty chunks |
| CVE-2026-89647 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | ceph: do not repeat ceph_trim_dentries() if no progress possible |
| CVE-2026-89648 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | ceph: cap delegated inode count in ceph_parse_deleg_inos() |
| CVE-2026-89649 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | ceph: bound xattr value length in __build_xattrs() |
| CVE-2026-89650 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | ceph: bound num_export_targets array for mds info v2/v3 |
| CVE-2026-89685 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | nfsd: fix clock domain mismatch in clients_still_reclaiming() |
| CVE-2026-89863 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check |
| CVE-2026-89968 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | nvmet-tcp: reject unsolicited H2CData PDUs |
| CVE-2026-93450 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal |
| CVE-2026-93990 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate |
| CVE-2026-87776 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Linux / other | compression vulnerable to Denial of Service via memory leak on premature response close |
| CVE-2026-78254 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write |
| CVE-2026-86098 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape |
| CVE-2026-89482 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone |
| CVE-2026-91710 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91710: Use after free |
| CVE-2026-91716 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91716: Use after free |
| CVE-2026-91718 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91718: Use after free |
| CVE-2026-91728 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91728: Integer overflow |
| CVE-2026-91729 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91729: Use after free |
| CVE-2026-91738 | Normal | 9.6 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91738: Improper input validation |
| CVE-2026-72649 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Linux / other | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution |
| CVE-2026-69681 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-19931 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | Negotiate ambient user conn reuse |
| CVE-2026-18924 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | HTTP/2 server push UAF |
| CVE-2026-80904 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | net/tls: Fail tls_sw_splice_read() after a failed async decrypt |
| CVE-2026-80846 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | xfrm: drop ESP-in-TCP packets with no ingress device |
| CVE-2026-80848 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | xfrm: espintcp: fix UAF during close |
| CVE-2026-53940 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation |
| CVE-2026-82412 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Linux / other | ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API |
| CVE-2026-84990 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | ntopng: Missing Authorization on System Configuration Backup Download and Listing |
| CVE-2026-87587 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Linux / other | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-87612 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Linux / other | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-87625 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Linux / other | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) |
| CVE-2026-87489 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87489: Memory corruption in V8 |
| CVE-2026-87536 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87536: Use after free in V8 |
| CVE-2026-91709 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91709: Type confusion |
| CVE-2026-91711 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91711: Out of bounds write |
| CVE-2026-91715 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91715: Type confusion |
| CVE-2026-91722 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91722: Use after free |
| CVE-2026-91731 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91731: Type confusion |
| CVE-2026-91736 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91736: Use after free |
| CVE-2026-91737 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91737: Use after free |
| CVE-2026-91741 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91741: Type confusion |
| CVE-2026-91745 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91745: Use after free |
| CVE-2026-78227 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | Use-after-free in DoQ stream output buffer on reset re-transmission |
| CVE-2026-89158 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. |
| CVE-2026-89476 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | sctp: fix stream->outcnt underflow on duplicate RECONF responses |
| CVE-2026-91712 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91712: Race condition |
| CVE-2026-91724 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91724: Use after free |
| CVE-2026-91733 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91733: Improper state validation |
| CVE-2026-91735 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91735: Incorrect authorization |
| CVE-2026-91743 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91743: Race condition |
| CVE-2026-91748 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91748: Race condition |
| CVE-2026-18149 | Normal worm | 5.9 | Moderate | Denial of Service | Other / general Windows | Linux / other | undici vulnerable to Denial of Service via orphaned RetryHandler response body |
| CVE-2026-19662 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | qpcache NOQNAME proof use-after-free crashes recursive resolver |
| CVE-2026-19941 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof |
| CVE-2026-77117 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | SHIFT_JISX0213 decoding may hang on crafted input |
| CVE-2026-78129 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. |
| CVE-2026-80489 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | EUC_JISX0213 decoding may hang on crafted input |
| CVE-2026-82720 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | Use-after-free in DoH stream cleanup code path |
| CVE-2026-85534 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read |
| CVE-2026-86003 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP |
| CVE-2026-89531 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | svcrdma: Reject connection when transport allocation fails |
| CVE-2026-89550 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: svcauth_gss: enforce krb5 token minimum length |
| CVE-2026-89564 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | ip: orphan prefetched skbs before multicast forwarding |
| CVE-2026-83621 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs |
| CVE-2026-89952 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | mtd: rawnand: validate ONFI extended parameter page sections |
| CVE-2026-0799 | Normal | 8.7 | Important | — | Other / general Windows | Linux / other | OOBR and OOBW in libpcap before 1.10.7 |
| CVE-2026-86090 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers |
| CVE-2026-86091 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler |
| CVE-2026-19542 | Normal worm | 5.6 | Moderate | — | Other / general Windows | Linux / other | Stack-based out-of-bounds write in tdelete during tree rebalancing |
| CVE-2026-78135 | Normal worm | 5.6 | Moderate | — | Other / general Windows | Linux / other | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass. |
| CVE-2026-89930 | Normal | 9.3 | Important | — | Other / general Windows | Linux / other | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter |
| CVE-2026-90049 | Normal | 9.3 | Important | — | Other / general Windows | Linux / other | net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() |
| CVE-2026-70574 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-80890 | Normal worm | 4.8 | Moderate | — | Other / general Windows | Linux / other | sctp: reject stale cookies with mismatched verification tags |
| CVE-2026-85197 | Normal | 7.6 | Important | — | Other / general Windows | Linux / other | Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload |
| CVE-2026-19668 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching |
| CVE-2026-69186 | Normal worm | 5.3 | Moderate | Denial of Service | Network / infra servers | Linux / other | c-ares: Memory-amplification denial of service via unvalidated DNS header record counts |
| CVE-2026-80225 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | Possible degradation of service from continuous queries on the same TCP/DoT connection |
| CVE-2026-85501 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC |
| CVE-2026-78133 | Normal | 7.5 | Moderate | — | Other / general Windows | Linux / other | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. |
| CVE-2026-87601 | Normal | 7.5 | Moderate | — | Browser (Edge auto-update) | Linux / other | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-88806 | Normal | 7.5 | Important | — | Other / general Windows | Linux / other | libX11 XkbGetMap Reply Heap-based Buffer Overflow |
| CVE-2026-89669 | Normal | 7.5 | Important | — | Other / general Windows | Linux / other | nfsd: initialize copy-notify stateid before publishing it |
| CVE-2026-89708 | Normal | 7.5 | Important | — | Other / general Windows | Linux / other | nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown |
| CVE-2026-80798 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | nfc: llcp: reject PDUs shorter than the LLCP header |
| CVE-2026-80799 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers |
| CVE-2026-80800 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | nfc: llcp: bound the connect_sn TLV walk to the skb |
| CVE-2026-80803 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | nfc: digital: clamp SENSF_RES length to the destination buffer |
| CVE-2026-80823 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | nfc: st21nfca: validate ATR_REQ length against the received frame |
| CVE-2026-87766 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup |
| CVE-2026-89777 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | vfio/pci: clear vdev->msi_perm after freeing it on init failure |
| CVE-2026-89811 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | drm/amdkfd: Add TLB flush after MES queue eviction/suspension |
| CVE-2026-89844 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition |
| CVE-2026-89849 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path |
| CVE-2026-89860 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Initialize NVMe abort_work once at submission |
| CVE-2026-89913 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables |
| CVE-2026-89929 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU |
| CVE-2026-89932 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | KVM: nVMX: Always flush vpid02 on first use |
| CVE-2026-89959 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove |
| CVE-2026-89960 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() |
| CVE-2026-89995 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | dma-direct: return struct page from dma_direct_alloc_from_pool() |
| CVE-2026-90000 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | HID: rmi: fix OOB access with undersized RMI reports |
| CVE-2026-90018 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() |
| CVE-2026-90041 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | HID: sony: clean up device list on probe failure |
| CVE-2026-86140 | Normal | 8.0 | Important | — | Other / general Windows | Linux / other | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. |
| CVE-2026-89656 | Normal | 7.2 | Important | — | Other / general Windows | Linux / other | libceph: reject buckets with mismatched CRUSH ids |
| CVE-2026-78408 | Normal | 7.9 | Important | — | Other / general Windows | Linux / other | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority |
| CVE-2026-78134 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity. |
| CVE-2026-89694 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | nfsd: check client ownership when cancelling a copy-notify stateid |
| CVE-2026-76642 | Normal | 7.8 | Moderate | — | Other / general Windows | Linux / other | util-linux libmount Privilege Escalation via Failed Mount Helper |
| CVE-2026-78410 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection |
| CVE-2026-80909 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | drm/amdgpu: Reject UVD message with invalid number of h265 refs |
| CVE-2026-84838 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() |
| CVE-2026-91742 | Normal worm | 4.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91742: Confused deputy |
| CVE-2026-69549 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-69611 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-89638 | Normal | 8.4 | Important | — | Network / infra servers | Linux / other | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions |
| CVE-2026-89781 | Normal | 8.4 | Important | — | Other / general Windows | Linux / other | fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() |
| CVE-2026-89795 | Normal | 8.4 | Important | — | Other / general Windows | Linux / other | PCI: Allow per function PCI slots to fix slot reset on s390 |
| CVE-2026-89806 | Normal | 8.4 | Important | — | Other / general Windows | Linux / other | drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation |
| CVE-2026-89856 | Normal | 8.4 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation |
| CVE-2026-89992 | Normal | 8.4 | Important | — | Other / general Windows | Linux / other | cpuidle: dt_idle_genpd: kfree() the original name allocation |
| CVE-2026-6485 | Normal | 8.2 | Important | — | Other / general Windows | Linux / other | UEFI BIOS embedded Shell can be used to bypass Secure Boot |
| CVE-2026-13608 | Normal worm | 3.7 | Low | — | Identity / AD | Linux / other | OpenLDAP SASL authentication bypass |
| CVE-2026-89999 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | HID: wacom: validate report length in wacom_intuos_pro2_bt_irq |
| CVE-2026-91727 | Normal | 8.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91727: Incorrect reference resolution |
| CVE-2026-89947 | Normal | 8.0 | Important | — | Other / general Windows | Linux / other | clk: meson: align gxbb_32k_clk_sel number of parents with actual count |
| CVE-2026-89481 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | nvme-tcp: fix host memory disclosure on R2T for a read command |
| CVE-2026-89537 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 |
| CVE-2026-89632 | Normal | 6.5 | Moderate | — | Network / infra servers | Linux / other | smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() |
| CVE-2026-89657 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | libceph: validate OSD extent maps before cursor advance |
| CVE-2026-89671 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | nfsd: gate nfs3 setacl by argp->mask |
| CVE-2026-89699 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | nfsd: validate symlink target length in NFSv4 CREATE |
| CVE-2026-90078 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: act_skbmod: fix length calculations and avoid invalid header warnings |
| CVE-2026-90088 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop |
| CVE-2026-90083 | Normal | 7.9 | Important | — | Other / general Windows | Linux / other | net/sched: act_ife: Only operate on Ethernet frames |
| CVE-2026-89659 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | NFSD: Prevent client use-after-free during delegation revoke |
| CVE-2026-80732 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ata: pata_sl82c105: fix bridge revision use-after-free |
| CVE-2026-80737 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | serial: amba-pl011: synchronize DMA teardown |
| CVE-2026-89789 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free |
| CVE-2026-89793 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ublk: clear VM_MAYWRITE on read-only ublk char device mmap |
| CVE-2026-89799 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | bpf: Disable preemption in bpf_get_stackid |
| CVE-2026-89801 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE |
| CVE-2026-89810 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | drm/amdkfd: Fix error path at svm_migrate_copy_to_ram |
| CVE-2026-89823 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | drm: fix race between partial drm_dev_register() failure and ioctl |
| CVE-2026-89853 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump |
| CVE-2026-89854 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Fix cs84xx use-after-free on host teardown |
| CVE-2026-89864 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | scsi: qla2xxx: Bound i2c->length in I2C bsg handlers |
| CVE-2026-89870 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: zoran: Avoid freeing a registered video_device twice |
| CVE-2026-89883 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: rc: sunxi-cir: Unregister rc device on probe failure |
| CVE-2026-89887 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: i2c: ov7740: fix use-after-destroy in remove |
| CVE-2026-89888 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: i2c: ov02a10: fix endpoint parsing use-after-free |
| CVE-2026-89890 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: go7007: defer the ALSA v4l2 put until card release |
| CVE-2026-89893 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: cx23885: cancel NetUP CI work before teardown |
| CVE-2026-89894 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: cx231xx: reject geometry changes while the VBI queue is busy |
| CVE-2026-89899 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: cec: disable delayed work before freeing an interrupted transmit |
| CVE-2026-89902 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | LoongArch: Avoid preempt count underflow without probe |
| CVE-2026-89906 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | LoongArch: BPF: Refactor jump offset calculation in tail call |
| CVE-2026-89920 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | KVM: s390: Fix memory corruption by not reinjecting CK machine checks |
| CVE-2026-89922 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | KVM: s390: Take srcu when importing watchpoint data |
| CVE-2026-89938 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF |
| CVE-2026-89956 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects |
| CVE-2026-89961 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population |
| CVE-2026-89965 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | nvdimm/btt: reject an arena whose nfree is below the lane count |
| CVE-2026-89988 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | kprobes: Protect kprobe_blacklist with RCU |
| CVE-2026-90002 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ftrace: Take trace_array reference before accessing its ftrace_ops |
| CVE-2026-90007 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | scsi: pm8001: Use rollback index when freeing MSI-X vectors |
| CVE-2026-90013 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | tracing: Take trace_array reference when opening options file |
| CVE-2026-90022 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | usb: gadget: f_midi2: fix use-after-free in string attribute show path |
| CVE-2026-90027 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop |
| CVE-2026-90030 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | usb: dwc3: clear forceRM when issuing EndTransfer |
| CVE-2026-90032 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | media: usbtv: keep device alive while ALSA card exists |
| CVE-2026-90045 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | USB: gadget: ffs: fix mm lifetime handling |
| CVE-2026-90081 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | net/rds: use wq_has_sleeper() in rds_cong_map_updated() |
| CVE-2026-90140 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | cuse: wait for pending RCU callbacks on module exit |
| CVE-2026-90141 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ipvs: fix integer overflow in ftp helper port/address parsing |
| CVE-2026-90169 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ksmbd: free preauth sessions on connection teardown |
| CVE-2026-90188 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | null_blk: free global tag_set on init error path |
| CVE-2026-90189 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | null_blk: register configfs subsystem after creating default devices |
| CVE-2026-90222 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | nfc: pn533: hold a reference to the request skb during send_frame |
| CVE-2026-90227 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() |
| CVE-2026-90253 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | Bluetooth: MGMT: free the mesh send cancel command when it is cancelled |
| CVE-2026-90263 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | btrfs: check if root is readonly when setting posix acl |
| CVE-2026-90279 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | md/raid5: round bitmap stripes with sector division |
| CVE-2026-90291 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | module/dups: Fix use-after-free in kmod_dup_req lifetime handling |
| CVE-2026-90292 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/siw: Fix use-after-free in siw_accept() |
| CVE-2026-90295 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | cpufreq: imx6q: fix out-of-bounds write when probed more than once |
| CVE-2026-90302 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ocfs2: synchronize heartbeat callbacks with o2net teardown |
| CVE-2026-90321 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | ocfs2: validate inline xattrs during inode block validation |
| CVE-2026-90327 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | phonet: pep: do not write beyond optlen in getsockopt |
| CVE-2026-90334 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | tty: clear cdev pointer after cdev_add() failure |
| CVE-2026-90347 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry |
| CVE-2026-92495 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap |
| CVE-2026-92496 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() |
| CVE-2026-92506 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | firmware: arm_scmi: Fix requested device removal race |
| CVE-2026-92509 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/core: Fix potential use after free in counter_release() |
| CVE-2026-92510 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/core: Fix potential use after free in ib_destroy_srq_user() |
| CVE-2026-92514 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/erdma: Fix CEQ tasklet use-after-free on removal |
| CVE-2026-93051 | Normal | 7.8 | Important | — | Endpoints / Windows client | Linux / other | misc: ad525x_dpot: use driver core groups for sysfs files |
| CVE-2026-93108 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/ipoib: Drain RCU callbacks during module teardown |
| CVE-2026-93123 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | serial: qcom-geni: do not advance stale DMA completions |
| CVE-2026-93137 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | bpf: Fix use-after-free on mm_struct in bpf_find_vma() |
| CVE-2026-93141 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | usb: gadget: r8a66597: avoid double free of ep0_req in probe error path |
| CVE-2026-84233 | Normal | 7.0 | Moderate | — | Other / general Windows | Linux / other | Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames |
| CVE-2026-90025 | Normal | 7.7 | Important | — | Other / general Windows | Linux / other | usb: typec: ucsi: displayport: Fix OOB altmode array index |
| CVE-2026-86138 | Normal | 6.9 | Moderate | — | Other / general Windows | Linux / other | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. |
| CVE-2026-86142 | Normal | 6.9 | Moderate | — | Other / general Windows | Linux / other | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. |
| CVE-2026-86143 | Normal | 6.9 | Moderate | — | Other / general Windows | Linux / other | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback. |
| CVE-2026-86139 | Normal | 6.9 | Moderate | — | Other / general Windows | Linux / other | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. |
| CVE-2026-78607 | Normal | 5.4 | Moderate | Information Disclosure | Other / general Windows | Linux / other | Missing Authorization in Elasticsearch Leading to Information Disclosure |
| CVE-2026-89897 | Normal | 7.5 | Moderate | — | Other / general Windows | Linux / other | media: cec: Serialize exclusive follower delivery |
| CVE-2026-18540 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | undici vulnerable to downstream response splitting via retry interceptor |
| CVE-2026-77860 | Normal worm | 3.7 | — | — | Other / general Windows | Linux / other | 'serve-expired' can bypass Unbound 'wait-limit' |
| CVE-2026-78124 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime. |
| CVE-2026-78127 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. |
| CVE-2026-78131 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. |
| CVE-2026-80230 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | OpenSSL pinning bypass |
| CVE-2026-80255 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | secure cookie attribute bypass with tab |
| CVE-2026-89156 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. |
| CVE-2026-89160 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject. |
| CVE-2026-89565 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | ipip: fix skb leak in collect_md mode when metadata_dst allocation fails |
| CVE-2026-80231 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | native CA store conn reuse |
| CVE-2026-91734 | Normal | 7.4 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91734: Incorrect authorization |
| CVE-2026-89161 | Normal | 7.4 | Important | — | Other / general Windows | Linux / other | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. |
| CVE-2026-78301 | Normal | 5.8 | Moderate | — | Other / general Windows | Linux / other | Out-of-zone database nodes can become authoritative zone cuts |
| CVE-2026-80819 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept |
| CVE-2026-18238 | Normal | 5.0 | Moderate | — | Other / general Windows | Linux / other | OOBR in rpcap client in libpcap before 1.10.7 |
| CVE-2026-80757 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | selinux: reject a class permission count below its inherited common |
| CVE-2026-56143 | Normal | 4.9 | Moderate | Denial of Service | Other / general Windows | Linux / other | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service |
| CVE-2026-78807 | Normal | 7.1 | Important | — | Network / infra servers | Linux / other | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c |
| CVE-2026-89596 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | forcedeth: fix off-by-one when saving/restoring non-PCI config space |
| CVE-2026-89785 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init |
| CVE-2026-89787 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() |
| CVE-2026-89797 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | power: supply: ab8500_fg: fix use-after-free on remove |
| CVE-2026-89817 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/gud: NUL-terminate TV mode names read from the device |
| CVE-2026-89818 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check |
| CVE-2026-89837 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | f2fs: fix dentry folio leak in find_in_level |
| CVE-2026-89839 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() |
| CVE-2026-89840 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | f2fs: validate MOVE_RANGE destination size |
| CVE-2026-89842 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started |
| CVE-2026-89843 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak |
| CVE-2026-89845 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() |
| CVE-2026-89852 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() |
| CVE-2026-89858 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() |
| CVE-2026-89859 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak |
| CVE-2026-89862 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Fix BSG job leak on validate flash image error path |
| CVE-2026-89874 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | media: v4l2-async: avoid deleting unlinked ASC entry on link error |
| CVE-2026-89878 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | media: s2255: check firmware size before reading trailing marker |
| CVE-2026-89884 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup |
| CVE-2026-89891 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | media: em28xx: fix use-after-free of dev_next->devlist on disconnect |
| CVE-2026-89892 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | media: em28xx: defer audio-only extension registration |
| CVE-2026-89923 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | KVM: s390: Free guest debug data on vcpu destroy |
| CVE-2026-89927 | Normal | 7.1 | Moderate | — | Virtualization / Hyper-V | Linux / other | KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock |
| CVE-2026-89934 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | iio: light: ltrf216a: fix runtime PM reference leak in error path |
| CVE-2026-89939 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable |
| CVE-2026-89948 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | batman-adv: bla: fix freeing of claims on meshif deletion |
| CVE-2026-89962 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | powerpc/kexec_file: Prevent kexec range truncation |
| CVE-2026-89984 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | perf/x86/intel: Fix kernel address leakages in LBR stack |
| CVE-2026-90016 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() |
| CVE-2026-90017 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() |
| CVE-2026-90031 | Normal | 7.1 | Moderate | — | Endpoints / Windows client | Linux / other | usb-storage: ene_ub6250: fix race between scan work and probe |
| CVE-2026-90033 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() |
| CVE-2026-90067 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | libceph: validate banner payload length |
| CVE-2026-90092 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN |
| CVE-2026-90102 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | NFSv4/pnfs: key the data server cache on the NFS version |
| CVE-2026-90104 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | NFSv4.1: zero referring call lists before decoding |
| CVE-2026-90106 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net: bridge: arp/nd proxy: fix reading neigh ha |
| CVE-2026-90108 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition |
| CVE-2026-90124 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | irqchip/renesas-rzg2l: Fix loss of interrupt |
| CVE-2026-90126 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | rtc: pcf8563: fix clock provider leak on unbind |
| CVE-2026-90143 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net: kcm: Hold RCU read lock while running BPF parser |
| CVE-2026-90154 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ksmbd: scope session state changes to bound connections |
| CVE-2026-90170 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ksmbd: validate ipc response length before dereferencing its fields |
| CVE-2026-90204 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ocfs2: validate DIO orphan slot during inode read |
| CVE-2026-90205 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ocfs2: validate orphan slot during inode read |
| CVE-2026-90226 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | nfc: llcp: avoid userspace overflow on invalid optlen |
| CVE-2026-90230 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() |
| CVE-2026-90235 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE |
| CVE-2026-90255 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_conn: fix the SCO setup context lifetime |
| CVE-2026-90298 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/sun4i: tcon: Drop TCON TOP device reference |
| CVE-2026-90300 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | bpf: Clear buf on error in __bpf_get_task_stack |
| CVE-2026-90301 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ocfs2: o2hb: quiesce negotiate handlers and timeout work |
| CVE-2026-90313 | Normal | 7.1 | Moderate | — | Endpoints / Windows client | Linux / other | bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed |
| CVE-2026-90314 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() |
| CVE-2026-90318 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | fat: release buffer head after rebuilding parent |
| CVE-2026-90319 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | rapidio: clear mport->net when rio_add_net() fails |
| CVE-2026-90330 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | HID: logitech-hidpp: Fix FF device cleanup on init failure |
| CVE-2026-90362 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/msm/dsi: Drop dev_pm_opp_set_rate(0) |
| CVE-2026-90366 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV |
| CVE-2026-90374 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] |
| CVE-2026-90383 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | misc: sgi-gru: remove interrupt-context page-table walks |
| CVE-2026-90389 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | md: scope memalloc_noio to allocation critical sections |
| CVE-2026-90394 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | power: supply: sc2731_charger: cancel work on remove |
| CVE-2026-90411 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request |
| CVE-2026-90415 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | RDMA/cxgb4: free STAG index when TPT entry write fails |
| CVE-2026-90419 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | nilfs2: prevent out-of-bounds read in super root block parsing |
| CVE-2026-92477 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | scsi: ufs: debugfs: Reserve space for a string terminator |
| CVE-2026-92484 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | cxl/region: Fix use-after-free in find_pos_and_ways() error path |
| CVE-2026-92489 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | xfrm: Fix skb double-free in xfrm_dev_direct_output() |
| CVE-2026-92508 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | RDMA/core: Fix potential use after free in ib_free_cq() |
| CVE-2026-92522 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ACPI: processor: validate MADT IOAPIC entry bounds |
| CVE-2026-93050 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove |
| CVE-2026-93055 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | UDF symlink pathComponent header OOB read |
| CVE-2026-93062 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments |
| CVE-2026-93063 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: iwlwifi: mei: check SAP message length before reading it |
| CVE-2026-93064 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser |
| CVE-2026-93067 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/bridge: tc358767: clamp the reported AUX read size to the request |
| CVE-2026-93073 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | dax: read holder_ops once in dax_holder_notify_failure() |
| CVE-2026-93086 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | firmware: arm_scmi: Avoid IDR updates while cleaning channels |
| CVE-2026-93092 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | firmware: arm_scmi: Unregister device notifier before IDR teardown |
| CVE-2026-93117 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | usb: fix UAF when probe runs concurrent to dyn ID removal |
| CVE-2026-93129 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | platform/x86: dell-wmi-base: Fix handling of ultra performance key |
| CVE-2026-93144 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | bpf: Reject writes through untrusted BTF pointers |
| CVE-2026-93145 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() |
| CVE-2026-93151 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | nvmet-rdma: fix response resource leak on queue teardown |
| CVE-2026-93156 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | crypto: rk3288 - fail ahash requests on HASH idle timeout |
| CVE-2026-93177 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup |
| CVE-2026-93178 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup |
| CVE-2026-93188 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | HID: roccat: bound device-supplied profile index |
| CVE-2026-93200 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | i3c: master: Fix use-after-free of master->this |
| CVE-2026-93203 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | batman-adv: bla: avoid CRC corruption due to parallel claim add |
| CVE-2026-80785 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | fbdev: serialize mode sysfs access with lock_fb_info() |
| CVE-2026-80831 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | crypto: mxs-dcp - fix source scatterlist length access |
| CVE-2026-71220 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit |
| CVE-2026-71221 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta |
| CVE-2026-80977 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | net: skbuff: don't touch shared zerocopy state in skb_tx_error() |
| CVE-2026-80982 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | net/smc: fix use-after-free in smc_rx_pipe_buf_release() |
| CVE-2026-89545 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | sunrpc: defer rq_argp and rq_resp free until after RCU grace period |
| CVE-2026-89610 | Normal | 7.0 | Important | — | Endpoints / Windows client | Linux / other | ntfs: verify run length exceeding volume boundary |
| CVE-2026-89750 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | tracing/user_events: Clear copied tracing state before fork duplication |
| CVE-2026-90162 | Normal | 7.0 | Moderate | — | Other / general Windows | Linux / other | ksmbd: defer publishing granted locks to prevent UAF/double-free race |
| CVE-2026-91986 | Normal | 5.4 | Low | — | Other / general Windows | Linux / other | gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection |
| CVE-2026-89729 | Normal | 6.8 | Moderate | — | Other / general Windows | Linux / other | HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature |
| CVE-2025-24890 | Normal | 6.8 | Moderate | — | Other / general Windows | Linux / other | gix-sec safe.directory protections absent for elevated administrators |
| CVE-2026-89538 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field |
| CVE-2026-89662 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | NFSD: Prevent lock owner use-after-free during client teardown |
| CVE-2026-89686 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke |
| CVE-2026-91714 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91714: Observable discrepancy |
| CVE-2026-91725 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91725: Observable discrepancy |
| CVE-2026-91744 | Normal | 5.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91744: Race condition |
| CVE-2026-80755 | Normal | 6.0 | Moderate | — | Other / general Windows | Linux / other | selinux: reject a permission value exceeding the class permission count |
| CVE-2026-80844 | Normal | 6.0 | Moderate | — | Network / infra servers | Linux / other | xfrm: ah6: validate routing header segments_left |
| CVE-2026-80852 | Normal | 6.0 | Moderate | — | Other / general Windows | Linux / other | tls: device: fix out-of-bounds write in tls_append_frag() |
| CVE-2026-80807 | Normal | 6.0 | Moderate | — | Other / general Windows | Linux / other | nilfs2: reject invalid block index in GC ioctl |
| CVE-2026-89573 | Normal | 6.7 | Moderate | — | Other / general Windows | Linux / other | dm array: reject an array block whose value size is not the caller's |
| CVE-2026-89746 | Normal | 6.7 | Moderate | — | Other / general Windows | Linux / other | tracing: Fix use-after-free with same-name named triggers |
| CVE-2026-80783 | Normal | 5.9 | Moderate | — | Other / general Windows | Linux / other | HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() |
| CVE-2026-80829 | Normal | 5.9 | Moderate | — | Other / general Windows | Linux / other | ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() |
| CVE-2026-80780 | Normal | 5.9 | Moderate | — | Other / general Windows | Linux / other | HID: pidff: fix OOB write when hid->inputs is empty |
| CVE-2026-80802 | Normal | 5.9 | Moderate | — | Other / general Windows | Linux / other | nfc: fdp: bound the device-reported read length and fix an skb leak |
| CVE-2026-80891 | Normal | 5.9 | Moderate | — | Other / general Windows | Linux / other | KVM: s390: pci: Validate AIBV and AISB before pinning guest pages |
| CVE-2026-18313 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | rpcapd memory leak in libpcap before 1.10.7 |
| CVE-2026-85769 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize |
| CVE-2026-90015 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | xhci: fix lost bounce buffers on TDs spanning several ring segments |
| CVE-2026-80731 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header |
| CVE-2026-80841 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | net/packet: defer vmalloc TX_RING free until skbs finish |
| CVE-2026-80842 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context |
| CVE-2026-80790 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | nvmet-fc: fix invalid free in LS IOD error path |
| CVE-2026-80851 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | gtp: serialize PDP context updates |
| CVE-2026-80854 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | usb: gadget: f_tcm: keep port count until LUN teardown completes |
| CVE-2026-80952 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | i3c: master: Fix info leak and UAF in device unregister path |
| CVE-2026-89448 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | iommu/vt-d: Force requesting ACS when tboot is enabled |
| CVE-2026-89547 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: Check svc pool percpu counter allocation |
| CVE-2026-89548 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: always drain cache_cleaner before destroying a cache_detail |
| CVE-2026-89625 | Normal | 6.4 | Moderate | — | Endpoints / Windows client | Linux / other | HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind |
| CVE-2026-89643 | Normal | 6.4 | Moderate | — | Other / general Windows | Linux / other | audit: avoid dropping live tree ref on fsnotify rule autoremove |
| CVE-2026-86144 | Normal | 5.6 | Moderate | Denial of Service | Other / general Windows | Linux / other | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow). |
| CVE-2026-80768 | Normal | 5.6 | Moderate | — | Other / general Windows | Linux / other | HID: ft260: fix stack-use-after-return write in I2C read race |
| CVE-2026-80980 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | net/smc: stop killed, freed and out_of_sync sharing a byte |
| CVE-2026-81002 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | xdp: fix zero-copy frame layout |
| CVE-2026-86805 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | AT_SECURE programs may load attacker-controlled code via $ORIGIN |
| CVE-2026-90091 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan |
| CVE-2026-90206 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | nvmet: fix max_qid race between configfs and controller allocation |
| CVE-2026-31911 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | abort() in libpcap before 1.10.7 on an invalid BPF opcode |
| CVE-2026-31912 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | OOBR in libpcap before 1.10.7 |
| CVE-2026-6244 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | division by zero in libpcap before 1.10.7 |
| CVE-2026-6554 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | infinte loop in libpcap before 1.10.7 |
| CVE-2026-80728 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Revert "drm/amdgpu: fix aperture mapping leak" |
| CVE-2026-80730 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ring-buffer: Fix crash passing ERR_PTR to kthread_stop() |
| CVE-2026-80733 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: remove WARN_ON_ONCE() from sk_mc_loop() |
| CVE-2026-80738 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie |
| CVE-2026-80742 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | af_packet: Don't send zero-byte data in tpacket_snd(). |
| CVE-2026-80743 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers |
| CVE-2026-80747 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amdkfd: Add bounds check for CRAT subtype length |
| CVE-2026-80752 | Normal | 5.5 | Moderate | — | Endpoints / Windows client | Linux / other | Input: psxpad-spi - set driver data before use |
| CVE-2026-80888 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/vmwgfx: drop dma_buf reference on foreign-fd prime import |
| CVE-2026-80905 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: tap: fix wrong transport_header when sending VLAN-tagged frame |
| CVE-2026-80832 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | crypto: qce - fix CCM AAD buffer underallocation |
| CVE-2026-89329 | Normal | 6.2 | Moderate | Denial of Service | Other / general Windows | Linux / other | Device-mapper-multipath: local denial of service via blocking ipc send operations |
| CVE-2026-91720 | Normal | 4.7 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91720: Uninitialized resource |
| CVE-2026-18090 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block |
| CVE-2026-80931 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | w1: ds28e17: reject an oversize length on an I2C block read |
| CVE-2026-90184 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | null_blk: serialize configfs attribute updates with device setup |
| CVE-2026-90251 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: MSFT: validate evt_prefix_len against the response length |
| CVE-2026-79705 | Normal | 4.5 | Moderate | — | Other / general Windows | Linux / other | Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers |
| CVE-2026-87564 | Normal | 4.3 | Moderate | — | Browser (Edge auto-update) | Linux / other | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-91719 | Normal | 4.3 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91719: Code injection |
| CVE-2026-91740 | Normal | 4.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91740: Uninitialized resource |
| CVE-2026-91746 | Normal | 4.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91746: Integer overflow |
| CVE-2026-80947 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop |
| CVE-2026-80979 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | net/smc: unregister the connection before draining the rx tasklet |
| CVE-2026-80991 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | net: ravb: serialize PTP clock teardown |
| CVE-2026-89157 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern. |
| CVE-2026-89469 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | power: supply: lp8727: fix use-after-free in lp8727_release_irq() |
| CVE-2026-89510 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | RDMA/cxgb4: Cancel reg_work before freeing device on remove |
| CVE-2026-89611 | Normal | 5.7 | Moderate | — | Endpoints / Windows client | Linux / other | ntfs: validate non-resident attribute offsets |
| CVE-2026-89740 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | serial: imx: serialize imx_uart_ports[] lifetime |
| CVE-2026-89741 | Normal | 5.7 | Moderate | — | Other / general Windows | Linux / other | Revert "media: v4l2-dev: fix error handling in __video_register_device()" |
| CVE-2026-91713 | Normal | 4.2 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91713: Missing authorization |
| CVE-2026-91723 | Normal | 4.2 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91723: Race condition |
| CVE-2026-91739 | Normal | 4.2 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91739: Missing authorization |
| CVE-2026-77159 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink |
| CVE-2026-82560 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width |
| CVE-2026-89604 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | efivarfs: Rate limit statfs() handler |
| CVE-2026-89742 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | rapidio: mport_cdev: fix use-after-free in dma_req_free() |
| CVE-2026-89784 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 |
| CVE-2026-89796 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | mm/damon/core: avoid infinite kdamond_merge_regions() internal loop |
| CVE-2026-89800 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE |
| CVE-2026-89802 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op |
| CVE-2026-89809 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds |
| CVE-2026-89812 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amdgpu: force complete the MES ring fences on reset |
| CVE-2026-89813 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amdgpu: force complete the KIQ ring fences on reset |
| CVE-2026-89816 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used |
| CVE-2026-89821 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amd/display: avoid divide-by-zero in __is_lut_linear() |
| CVE-2026-89822 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/i915: Guard against NULL driver_data in i915_pci_probe() |
| CVE-2026-89833 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() |
| CVE-2026-89850 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Don't query firmware state while chip is down |
| CVE-2026-89865 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers |
| CVE-2026-89871 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure |
| CVE-2026-89872 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link |
| CVE-2026-89879 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: s2255: bound JPEG frame size before copying into the buffer |
| CVE-2026-89881 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak |
| CVE-2026-89896 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: cedrus: fix memory leak in cedrus_init_ctrls() |
| CVE-2026-89900 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: cec: core: Fix kmemleak due to missed rc_free_device() call |
| CVE-2026-89901 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref |
| CVE-2026-89924 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | KVM: s390: Fix old_data leak in guest debug error path |
| CVE-2026-89933 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | iio: pressure: dps310: fix NULL pointer dereference on ACPI probe |
| CVE-2026-89937 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | iio: chemical: sgp30: Handle IAQ thread creation failure |
| CVE-2026-89945 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ASoC: cs35l34: drain threaded IRQ before runtime suspend |
| CVE-2026-89946 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ASoC: cs35l33: drain threaded IRQ before runtime suspend |
| CVE-2026-89953 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | mtd: mtdoops: free page bitmap when the backing MTD is removed |
| CVE-2026-89955 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | s390/vfio-ap: Fix NULL deref in status_show() during queue probe |
| CVE-2026-89975 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | nvme-fabrics: fix DHCHAP secret leak on parse failure |
| CVE-2026-89982 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | i2c: mux: Fix channel node leak on adapter add failure |
| CVE-2026-89987 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | mm/huge_memory: transfer the pmd dirty bit to the folio on zap |
| CVE-2026-89989 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() |
| CVE-2026-89993 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | dmaengine: dw-edma: Initialize IRQ data before requesting IRQs |
| CVE-2026-90019 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | usb: gadget: fix null pointer dereference in usb_put_function_instance() |
| CVE-2026-90020 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() |
| CVE-2026-90023 | Normal | 5.5 | Moderate | — | Endpoints / Windows client | Linux / other | usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() |
| CVE-2026-90035 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amd/display: fix division by zero in get_estimated_bw() |
| CVE-2026-90056 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: fec: only stop PTP if it was initialized |
| CVE-2026-90062 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | netfilter: nf_tables: move hardware offload step after building the chain blob |
| CVE-2026-90066 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify |
| CVE-2026-90071 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: sch_teql: restore skb->dev on the slave failure path |
| CVE-2026-90073 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: hhf: clamp quantum before hhf_change() to avoid overflow |
| CVE-2026-90074 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: fq_pie: clamp default quantum to avoid signed overflow |
| CVE-2026-90075 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: fq_codel: clamp default quantum and mtu |
| CVE-2026-90098 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: sparx5: fix sleep in atomic context in MAC table access |
| CVE-2026-90107 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/smc: free pending qentry in smc_llc_flow_stop() before memset |
| CVE-2026-90109 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue |
| CVE-2026-90119 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup |
| CVE-2026-90130 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | vdpa_sim: fix cleanup after worker creation failure |
| CVE-2026-90148 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() |
| CVE-2026-90150 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | pnfs/blocklayout: Fix device leaks on parse failure |
| CVE-2026-90156 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ksmbd: safely discard unregistered deferred locks |
| CVE-2026-90161 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | erofs: fix interlaced ztailpacking pclusters |
| CVE-2026-90166 | Normal | 5.5 | Moderate | — | Network / infra servers | Linux / other | smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() |
| CVE-2026-90175 | Normal | 5.5 | Moderate | — | Network / infra servers | Linux / other | smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer |
| CVE-2026-90182 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | blk-iocost: clear delay state when freeing policy data |
| CVE-2026-90202 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers |
| CVE-2026-90208 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type |
| CVE-2026-90213 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | firewire: core: fix memory leak in error path of build_tree() |
| CVE-2026-90218 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/cma: Fix WARNING in res_to_rt |
| CVE-2026-90229 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | nvme-apple: Destroy the admin queue on removal |
| CVE-2026-90237 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | netfilter: nft_ct: move custom expectation support to helper |
| CVE-2026-90245 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | fbdev: kyro: Validate overlay viewport coordinates |
| CVE-2026-90250 | Normal | 5.5 | Moderate | — | Endpoints / Windows client | Linux / other | bpf, cgroup: Fix storage null-ptr-deref after replacing prog |
| CVE-2026-90264 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | btrfs: always wait for ordered extents to avoid OE races |
| CVE-2026-90265 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | btrfs: defrag: fix deadlock between defrag and delalloc space reservation |
| CVE-2026-90274 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | coresight: etm4x: fix underflow for usage of (nrseqstate - 1) |
| CVE-2026-90280 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend |
| CVE-2026-90281 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend |
| CVE-2026-90282 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend |
| CVE-2026-90284 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | firmware_loader: do not queue completed sysfs fallback requests |
| CVE-2026-90285 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path |
| CVE-2026-90297 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/sun4i: crtc: Propagate layer initialization error |
| CVE-2026-90307 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ |
| CVE-2026-90308 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/erdma: Hold QP references for AE and CM processing |
| CVE-2026-90309 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/erdma: Hold CQ references when processing EQ events |
| CVE-2026-90329 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | HID: synchronize input before cleaning up a failed probe |
| CVE-2026-90333 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | dm-integrity: replace forgeable discard filler with a keyed sector marker |
| CVE-2026-90346 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: nl80211: clean up color-change beacon data on errors |
| CVE-2026-90352 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7915: release hif2 reference on probe IRQ failure |
| CVE-2026-90364 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ACPI: processor: Unregister cpufreq notifier on init failure |
| CVE-2026-90368 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7915: unwind state on add_interface failure |
| CVE-2026-90370 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config |
| CVE-2026-90379 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash |
| CVE-2026-90387 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | swiotlb: Preserve allocation virtual address for dynamic pools |
| CVE-2026-90388 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | iommu/dma: Check atomic pool allocation result directly |
| CVE-2026-90391 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone |
| CVE-2026-90395 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | power: supply: isp1704_charger: cancel work on remove |
| CVE-2026-90397 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published |
| CVE-2026-90417 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() |
| CVE-2026-90418 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch |
| CVE-2026-92476 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | crypto: keembay - Initialize completion before requesting IRQ |
| CVE-2026-92493 | Normal | 5.5 | Moderate | — | Endpoints / Windows client | Linux / other | cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active |
| CVE-2026-92494 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ext4: fix buffer_head leak in ext4_init_orphan_info |
| CVE-2026-92503 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() |
| CVE-2026-92519 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | riscv, bpf: Fix memory leak in bpf_jit_free |
| CVE-2026-92520 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | bpf: Zero queue and stack outputs on lock failure |
| CVE-2026-92523 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/nldev: validate dynamic counter attribute length |
| CVE-2026-93042 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | dmaengine: dw-edma: Terminate all descriptors without callbacks |
| CVE-2026-93047 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/v3d: Associate BOs with every job that accesses them |
| CVE-2026-93048 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() |
| CVE-2026-93052 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | misc: bcm-vk: Use acquire/release for msgq_inited |
| CVE-2026-93054 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | uio: Fix stale info pointer in failed registration path |
| CVE-2026-93058 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/msm: Only fini scheduler after successful init |
| CVE-2026-93072 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | irqchip/renesas-irqc: Fix generic interrupt chip leak on remove |
| CVE-2026-93090 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | firmware: arm_scmi: Clean up channels on setup failure |
| CVE-2026-93091 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | firmware: arm_scmi: Quiesce notifications before teardown |
| CVE-2026-93097 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | cxl/mbox: Break poison list loop on an empty payload |
| CVE-2026-93099 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | fs/resctrl: Fix UAF from worker threads when domains are removed |
| CVE-2026-93103 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/hfi1: Preserve unit 0 on allocation failure |
| CVE-2026-93104 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/rvt: Return NULL after port allocation failure |
| CVE-2026-93105 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | esp: do not unref managed frag pages in esp_ssg_unref() |
| CVE-2026-93114 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | platform/surface: acpi-notify: Check ACPI companion before use |
| CVE-2026-93116 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | platform/x86: asus-wmi: fix resource leaks on probe failure |
| CVE-2026-93118 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | usb: gadget: aspeed_udc: check endpoint DMA allocation |
| CVE-2026-93125 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max |
| CVE-2026-93142 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | thermal/drivers/rcar: Fix error checking in probe() |
| CVE-2026-93149 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mac80211_hwsim: avoid NULL skb in stop queue drain |
| CVE-2026-93150 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | cgroup/cpuset: Make nr_deadline_tasks an atomic_t |
| CVE-2026-93160 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | crypto: atmel-ecc - reject hardware ECDH without a public key |
| CVE-2026-93179 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read |
| CVE-2026-93183 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/lima: call drm_mm_init() with a valid allocation range |
| CVE-2026-93185 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ASoC: rt700-sdw: always drain jack work on remove |
| CVE-2026-93186 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | cxl/mbox: Clamp mailbox output allocation to the payload size |
| CVE-2026-93192 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drm/v3d: Clear queue->active_job when v3d_fence_create() fails |
| CVE-2026-93202 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | i3c: master: Fix recursive locking during device registration |
| CVE-2026-80726 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page |
| CVE-2026-80767 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | HID: sensor: custom: Fix use-after-free in enable_sensor |
| CVE-2026-80855 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | fuse: fix invalidate lock leak on open O_TRUNC DAX failure |
| CVE-2026-80856 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | fuse: fix invalidate lock leak on setattr writeback failure |
| CVE-2026-80864 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp |
| CVE-2026-80771 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | HID: nintendo: register input device after capabilities are set |
| CVE-2026-80809 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | ocfs2: fix missing metadata reservation for large xattrs |
| CVE-2026-80833 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | crypto: sun8i-ss - Remove crypto_rng interface |
| CVE-2026-80834 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | crypto: sun8i-ce - Remove crypto_rng interface |
| CVE-2026-71222 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing |
| CVE-2026-8674 | Normal | 5.3 | Moderate | — | Network / infra servers | Linux / other | Assertion failure in the DNS stub resolver with a long search domain |
| CVE-2026-89569 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: RFCOMM: serialize security confirmation handling |
| CVE-2026-89755 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | mm/migrate_device: clear stale mapping after freeing swapcache |
| CVE-2026-80765 | Normal | 4.5 | Moderate | — | Other / general Windows | Linux / other | HID: hyperv: validate initial device info bounds |
| CVE-2026-89762 | Normal | 5.2 | Moderate | — | Other / general Windows | Linux / other | apparmor: fix cred UAF caused by begin_current_label_crit_section() |
| CVE-2026-80756 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | selinux: do not cancel a policy conversion that never started |
| CVE-2026-80793 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | ipv4: reject undersized MTUs in ip_do_fragment() |
| CVE-2026-80805 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | xfs: validate attr entry pointer before field access |
| CVE-2026-80847 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | tcp: clamp route advmss to TCP_MIN_MSS |
| CVE-2026-80863 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | RDMA/rxe: Fix OOB in free_rd_atomic_resources() |
| CVE-2026-80902 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA |
| CVE-2026-80912 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | selinux: reject an unclaimed class value in security_get_classes() |
| CVE-2026-80913 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | selinux: require every boolean value to be defined |
| CVE-2026-91717 | Normal | 5.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91717: Missing authorization |
| CVE-2026-80763 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_event: validate LE Set CIG Parameters response |
| CVE-2026-80828 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | ALSA: usb-audio: Complete cleanup after system-resume errors |
| CVE-2026-80772 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() |
| CVE-2026-80794 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers |
| CVE-2026-80796 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | nfc: nci: add data_len bound checks to activation parameter extractors |
| CVE-2026-80801 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | nfc: microread: validate target discovery payload lengths |
| CVE-2026-80861 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | usb: xhci: bail out of setup if the controller is inaccessible |
| CVE-2026-80762 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_sync: Fix accept list UAF during suspend |
| CVE-2026-80764 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_event: fix LE list UAF on reset |
| CVE-2026-80806 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | ext4: don't enable DAX on new encrypted files |
| CVE-2026-80808 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | ext4: stop retrying saturated xattr cache entries |
| CVE-2026-80824 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | usb: usbfs: fix use-after-free of usb_device in usbdev_release() |
| CVE-2026-80826 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | USB: c67x00: fix use-after-free in c67x00_add_iso_urb() |
| CVE-2026-80836 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | crypto: virtio - bound the akcipher result length |
| CVE-2026-80866 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | tipc: avoid busy looping in tipc_exit_net() |
| CVE-2026-80820 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | xfs: don't livelock in scrub on a circular unlinked list |
| CVE-2026-80872 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | ALSA: hda/tas2781: Cancel async firmware request at unbind |
| CVE-2026-80766 | Normal | 4.0 | Moderate | — | Other / general Windows | Linux / other | HID: uclogic: fix use-after-free of inrange_timer on remove |
| CVE-2026-80782 | Normal | 4.0 | Moderate | — | Other / general Windows | Linux / other | HID: magicmouse: do not keep a stale msc->input if no input is claimed |
| CVE-2026-80830 | Normal | 4.0 | Moderate | — | Other / general Windows | Linux / other | usb: core: Add lock to usb_wakeup_notification() |
| CVE-2026-80770 | Normal | 4.0 | Moderate | — | Other / general Windows | Linux / other | HID: nintendo: stop device IO before hid_hw_stop on probe failure |
| CVE-2026-71219 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal |
| CVE-2026-71224 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk |
| CVE-2026-80923 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | xhci: dbgtty: Fix unregister on tty_register_driver() failure |
| CVE-2026-89487 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | openvswitch: only skb_tx_error() a packet we are about to drop |
| CVE-2026-89567 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | jbd2: bound shrinker scans by examined checkpoint buffers |
| CVE-2026-89598 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | fbdev: ssd1307fb: defer I2C transfers from damage callbacks |
| CVE-2026-89642 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | cifs: call pagecache_isize_extended() in cifs_setsize() when extending |
| CVE-2026-89753 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() |
| CVE-2026-89756 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() |
| CVE-2026-91708 | Normal | 3.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91708: Race condition |
| CVE-2026-91730 | Normal | 3.1 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91730: Incomplete cleanup |
| CVE-2026-91747 | Normal | 3.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-91747: Use after free |
| CVE-2026-80999 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO |
| CVE-2026-89539 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: reject duplicate CREDS_VALUE options |
| CVE-2026-89544 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | SUNRPC: fix gssx_dec_option_array error path bugs |
| CVE-2026-89726 | Normal | 4.4 | Moderate | — | Other / general Windows | Linux / other | lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() |
| CVE-2026-87875 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound |
| CVE-2026-90024 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs |
| CVE-2026-80914 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready |
| CVE-2026-81005 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | ipmi: si: Fix NULL pointer dereference after failed registration |
| CVE-2026-89092 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | Stack overflow in nscd due to unbounded alloca use |
| CVE-2026-80921 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | KVM: s390: vsie: zero stale crypto bits |
| CVE-2026-80917 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems |
| CVE-2026-80925 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | vlan: fix skb_under_panic and races when toggling HW VLAN offload |
| CVE-2026-80994 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | net: openvswitch: fix flow mask use-after-free on flow deletion |
| CVE-2026-89540 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | sunrpc: init gssp_lock before publishing proc entry |
| CVE-2026-89709 | Normal | 4.1 | Moderate | — | Other / general Windows | Linux / other | lockd, nfsd: RCU-protect nlmsvc_ops dispatch |
| CVE-2026-80744 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path |
| CVE-2026-80761 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | Bluetooth: ISO: zero the sockaddr before returning it in getname |
| CVE-2026-80892 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | erofs: cap LZMA stream pool size |
| CVE-2026-80910 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses |
| CVE-2026-89628 | Normal | 3.9 | Low | — | Other / general Windows | Linux / other | HID: picolcd: clamp eeprom debugfs read to bytes actually received |
| CVE-2026-89582 | Normal | 3.8 | Low | — | Other / general Windows | Linux / other | bnx2x: fix double free in bnx2x_init_firmware() error path |
| CVE-2026-86137 | Normal | 2.9 | Low | — | Other / general Windows | Linux / other | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. |
| CVE-2026-86141 | Normal | 2.9 | Low | — | Other / general Windows | Linux / other | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. |
| CVE-2026-89461 | Normal | 3.6 | Low | — | Other / general Windows | Linux / other | power: supply: max17040: synchronize work cancellation on suspend |
| CVE-2026-89757 | Normal | 3.6 | Low | — | Other / general Windows | Linux / other | mm/mglru: fix and remove redundant unevictable folio handling |
| CVE-2026-95818 | Normal | 3.6 | Low | — | Other / general Windows | Linux / other | AT_SECURE program buffer overflow via $ORIGIN processing |
| CVE-2026-89562 | Normal | 3.4 | Low | — | Other / general Windows | Linux / other | ip6_gre: fix hardware header length for NBMA tunnels |
| CVE-2026-80920 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | io_uring: defer eventfd signaling when queued from a wakeup handler |
| CVE-2026-91779 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference |
| CVE-2026-91780 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference |
| CVE-2026-91781 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference |
| CVE-2026-93191 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | smack: fix incorrect task context in smack_msg_queue_msgrcv |
| CVE-2026-18743 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | Popt-devel: popt-static: short realloc in poptconfigfiletostring |
| CVE-2026-80784 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | mptcp: pm: fix memory leak from alloc-during-teardown race |
| CVE-2026-80893 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() |
| CVE-2026-80889 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | can: isotp: fix timer drain order, wakeup handling and tx_gen ordering |
| CVE-2026-80843 | Normal | 2.3 | Low | — | Other / general Windows | Linux / other | xfrm: fix xfrm_state_construct() auth-trunc leak |
| CVE-2026-87876 | Normal | 3.0 | Low | — | Other / general Windows | Linux / other | Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up) |
| CVE-2026-89768 | Normal | 3.0 | Low | — | Other / general Windows | Linux / other | fs: fix user path of nested backing files |
| CVE-2026-89462 | Normal | 2.9 | Low | — | Other / general Windows | Linux / other | power: supply: max17040: propagate register read errors |
| CVE-2026-80797 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | nfc: pn533: purge fragmented skbs during cleanup |
| CVE-2026-80827 | Normal | 1.8 | Low | — | Other / general Windows | Linux / other | USB: serial: option: fix slab OOB read in interrupt URB callback |
| CVE-2026-80983 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | net/smc: fix socket refcount leak in smc_switch_conns() |
| CVE-2026-80918 | Normal | 2.4 | Low | — | Other / general Windows | Linux / other | HID: core: fix number/pointer type confusion on long items |
| CVE-2026-89627 | Normal | 2.1 | Low | — | Other / general Windows | Linux / other | HID: roccat: free buffered reports when destroying device |
| CVE-2026-80949 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() |
| CVE-2026-80996 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | net: l2tp: do not propagate multicast notification errors |
| CVE-2026-89473 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | power: supply: bq25890: Fix power_supply reference leak |
| CVE-2026-89597 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | fbdev: uvesafb: unregister connector callback on init failure |
| CVE-2026-89645 | Normal | 1.9 | Low | — | Other / general Windows | Linux / other | btrfs: drop recovered reloc root refs on recovery failure |
| CVE-2026-80948 | Normal | 1.6 | Low | — | Other / general Windows | Linux / other | wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() |
| CVE-2026-84323 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84323 Missing authorization in FileSystem |
| CVE-2026-84324 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84324 Use after free in Proxy |
| CVE-2026-84325 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84325 Improper input validation in DataTransfer |
| CVE-2026-84326 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84326 Uninitialized resource in V8 |
| CVE-2026-84327 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84327 Incorrect authorization in Autofill |
| CVE-2026-84328 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84328 Missing authorization in FileSystem |
| CVE-2026-84329 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider |
| CVE-2026-84331 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84331 Incorrect authorization in Actor |
| CVE-2026-84332 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings |
| CVE-2026-84334 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting |
| CVE-2026-84335 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip |
| CVE-2026-84347 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84347 Use after free in WebRTC |
| CVE-2026-84348 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84348 Information leak in MediaCapture |
| CVE-2026-84349 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84349 Use after free in Browser |
| CVE-2026-84350 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84350 Use after free in TabStrip |
| CVE-2026-84351 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84351 Buffer overflow in GPU |
| CVE-2026-84353 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups |
| CVE-2026-84354 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem |
| CVE-2026-84355 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84355 Incorrect authorization in Navigation |
| CVE-2026-84356 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen |
| CVE-2026-84357 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84357 Improper input validation in Omnibox |
| CVE-2026-84358 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84358 Improper privilege management in Downloads |
| CVE-2026-84359 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84359 Information leak in Skia |
| CVE-2026-55951 | Normal | — | Important | — | Other / general Windows | Linux / other | httpc memory exhaustion via unbounded response header accumulation |
| CVE-2026-59696 | Normal | — | Moderate | — | Other / general Windows | Linux / other | uri_string does not bound the port component of a URI before integer conversion |
| CVE-2026-66357 | Normal | — | Important | — | Other / general Windows | Linux / other | inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation |
| CVE-2026-66835 | Normal | — | Important | — | Other / general Windows | Linux / other | httpd mod_auth directory protection bypassed by a doubled slash in the request path |
| CVE-2026-69664 | Normal | — | Important | — | Other / general Windows | Linux / other | httpd parks a request worker indefinitely on a malformed chunk size sent after the headers |
| CVE-2026-70409 | Normal | — | Moderate | — | Identity / AD | Linux / other | eldap does not bound the port component of a referral URL before integer conversion |
| CVE-2026-71380 | Normal | — | Important | — | Other / general Windows | Linux / other | httpd applies no timeout while receiving a request body, parking a worker on a stalled client |
| CVE-2026-71562 | Normal | — | Moderate | — | Other / general Windows | Linux / other | httpc does not bound server-supplied numeric header values before integer conversion |
| CVE-2026-73270 | Normal | — | Important | — | Other / general Windows | Linux / other | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems |
| CVE-2026-73276 | Normal | — | Important | — | Other / general Windows | Linux / other | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i |
| CVE-2026-73812 | Normal | — | Important | — | Other / general Windows | Linux / other | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length |
| CVE-2026-74835 | Normal | — | Important | — | Other / general Windows | Linux / other | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception |
| CVE-2026-74994 | Normal | — | Moderate | — | Other / general Windows | Linux / other | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth |
| CVE-2026-75538 | Normal | — | Important | — | Endpoints / Windows client | Linux / other | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer |
| CVE-2026-83605 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed |
| CVE-2026-83607 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Element name injection via createElement() bypasses requireWellFormed |
| CVE-2026-83608 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: DocType `name` Injection Bypasses requireWellFormed |
| CVE-2026-83610 | Normal | — | Moderate | — | Other / general Windows | Linux / other | xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization |
| CVE-2026-83611 | Normal | — | Moderate | — | Other / general Windows | Linux / other | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content |
| CVE-2026-83613 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Quadratic-time attribute deduplication |
| CVE-2026-83614 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge |
| CVE-2026-83615 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Quadratic-memory consumption |
| CVE-2026-83616 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: Processing Instruction Target Injection Bypasses requireWellFormed |
| CVE-2026-83619 | Normal | — | Important | — | Other / general Windows | Linux / other | xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser |
| CVE-2026-84303 | Normal | — | Moderate | — | Other / general Windows | Linux / other | gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion |
| CVE-2026-85062 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Colord: Slow rejection of oversized malformed color strings |
| CVE-2026-11573 | Normal | — | Important | — | Other / general Windows | Linux / other | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) |
| CVE-2026-53495 | Normal | — | Moderate | Denial of Service | Other / general Windows | Linux / other | containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service |
| CVE-2026-65634 | Normal | — | Important | Denial of Service | Other / general Windows | Linux / other | Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder |
| CVE-2026-68956 | Normal | — | Important | — | Other / general Windows | Linux / other | SSH daemon allocates unbounded idle session channels, bypassing max_channels |
| CVE-2026-77406 | Normal | — | Important | — | Other / general Windows | Linux / other | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration |
| CVE-2026-77408 | Normal | — | Moderate | — | Other / general Windows | Linux / other | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow |
| CVE-2026-77409 | Normal | — | Moderate | Denial of Service | Other / general Windows | Linux / other | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking |
| CVE-2026-80781 | Normal | — | — | — | Other / general Windows | Linux / other | HID: core: fix OOB read of field->usage in hid_set_field() |
| CVE-2026-80795 | Normal | — | — | — | Other / general Windows | Linux / other | nfc: nci: fix out-of-bounds write in nci_target_auto_activated() |
| CVE-2026-80812 | Normal | — | — | — | Other / general Windows | Linux / other | ALSA: dummy: Check card index validity at probe |
| CVE-2026-80814 | Normal | — | — | — | Other / general Windows | Linux / other | rndis_host: add overflow check in rndis_rx_fixup() |
| CVE-2026-80822 | Normal | — | — | — | Other / general Windows | Linux / other | mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() |
| CVE-2026-80883 | Normal | — | — | — | Other / general Windows | Linux / other | drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered |
| CVE-2026-80887 | Normal | — | — | — | Other / general Windows | Linux / other | drm/vmwgfx: use check_add_overflow for shader size+offset bound |
| CVE-2026-80901 | Normal | — | — | — | Other / general Windows | Linux / other | ipvs: fix the checksum validations |
| CVE-2026-80906 | Normal | — | — | — | Other / general Windows | Linux / other | net: packet: fix wrong transport_header when sending VLAN-tagged frame |
| CVE-2026-80907 | Normal | — | — | — | Other / general Windows | Linux / other | drm/amdgpu: Fix UVD dpb min size calculation for H264 |
| CVE-2026-80908 | Normal | — | — | — | Other / general Windows | Linux / other | drm/amdgpu: Reject UVD message with dimensions above 4096 |
| CVE-2026-80911 | Normal | — | — | — | Other / general Windows | Linux / other | ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() |
| CVE-2026-81642 | Normal | — | Important | Remote Code Execution | Other / general Windows | Linux / other | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY |
| CVE-2026-81870 | Normal | — | Low | — | Other / general Windows | Linux / other | OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs |
| CVE-2026-81871 | Normal | — | Moderate | — | Other / general Windows | Linux / other | OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning |
| CVE-2026-81872 | Normal | — | Low | — | Other / general Windows | Linux / other | OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full |
| CVE-2026-82049 | Normal | — | Moderate | — | Other / general Windows | Linux / other | tarfile extraction filters allow file modification and content disclosure via hard link to symlink |
| CVE-2026-82717 | Normal | — | Important | — | Other / general Windows | Linux / other | CNAME synthesis could lead to heap corruption |
| CVE-2026-84445 | Normal | — | Important | Denial of Service | Other / general Windows | Linux / other | gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers |
| CVE-2026-87910 | Normal | — | Moderate | — | Other / general Windows | Linux / other | tarfile hardlink fallback ignores custom extraction filter rejection via None |
| CVE-2026-88807 | Normal | — | Moderate | — | Other / general Windows | Linux / other | libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow |
| CVE-2026-96269 | Normal | — | Important | — | Other / general Windows | Linux / other | GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it. |
| CVE-2026-76017 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76017: Use after free in Chromoting |
| CVE-2026-76018 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76018: Privilege elevation in Import |
| CVE-2026-76019 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76019: Incorrect authorization in Workers |
| CVE-2026-76021 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76021: Use after free in DOM |
| CVE-2026-76022 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-76022: Buffer overflow in Network |
| CVE-2026-76023 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming |
| CVE-2026-76036 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76036: Buffer overflow in Dawn |
| CVE-2026-76039 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76039: Incorrect reference resolution in Core |
| CVE-2026-84330 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84330 UI misrepresentation in FullScreen |
| CVE-2026-84333 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84333 Use after free in Dawn |
| CVE-2026-84352 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium: CVE-2026-84352 Use after free in WebGL |
| CVE-2026-85042 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85042: Use after free in DevTools |
| CVE-2026-85043 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-85043: Incomplete cleanup in Network |
| CVE-2026-85045 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85045: Race condition in V8 |
| CVE-2026-85048 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85048: Use after free in Compositing |
| CVE-2026-85049 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85049: Use after free in Skia |
| CVE-2026-85051 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85051: Type confusion in Compositing |
| CVE-2026-85052 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-85052: Out of bounds read in CrashReporting |
| CVE-2026-85053 | Normal | — | — | — | Endpoints / Windows client | Edge / Chromium | Chromium CVE-2026-85053: Improper resource exposure in CacheStorage |
| CVE-2026-87429 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87429: Missing authorization in ServiceWorker |
| CVE-2026-87430 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87430: Buffer overflow in WebRTC |
| CVE-2026-87431 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87431: Missing authorization in Extensions |
| CVE-2026-87432 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87432: Incorrect authorization in Navigation |
| CVE-2026-87433 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87433: Race condition in FileAPI |
| CVE-2026-87434 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87434: Missing authorization in CORS |
| CVE-2026-87435 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87435: Information leak in ControlledFrame |
| CVE-2026-87436 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87436: Incomplete cleanup in Browser |
| CVE-2026-87437 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87437: Information leak in Frames |
| CVE-2026-87439 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87439: Information leak in ServiceWorker |
| CVE-2026-87440 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87440: Out of bounds read in Media |
| CVE-2026-87441 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87441: Missing authorization in Downloads |
| CVE-2026-87442 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87442: Confused deputy in Prerender |
| CVE-2026-87443 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87443: Missing authorization in Actor |
| CVE-2026-87444 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87444: Memory corruption in Codecs |
| CVE-2026-87445 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87445: UI misrepresentation in Session |
| CVE-2026-87446 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87446: Incomplete cleanup in Extensions |
| CVE-2026-87447 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-87447: Incorrect authorization in Network |
| CVE-2026-87448 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87448: Use after free in DevTools |
| CVE-2026-87449 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials |
| CVE-2026-87450 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87450: Incorrect authorization in Permissions |
| CVE-2026-87451 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87451: Information leak in Downloads |
| CVE-2026-87452 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87452: Incorrect authorization in GPU |
| CVE-2026-87453 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87453: Confused deputy in BackgroundFetch |
| CVE-2026-87454 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87454: Information leak in Enterprise |
| CVE-2026-87455 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87455: Use after free in Aura |
| CVE-2026-87456 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87456: Uninitialized resource in Media |
| CVE-2026-87457 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87457: Race condition in Updater |
| CVE-2026-87458 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87458: UI misrepresentation in Geometry |
| CVE-2026-87459 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87459: Observable discrepancy in Select |
| CVE-2026-87460 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87460: Use after free in Platform |
| CVE-2026-87461 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87461: Information leak in Core |
| CVE-2026-87462 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87462: UI misrepresentation in FedCM |
| CVE-2026-87463 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87463: Incorrect authorization in Certificate |
| CVE-2026-87465 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87465: Incorrect authorization in Downloads |
| CVE-2026-87466 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87466: Incorrect authorization in Workers |
| CVE-2026-87467 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87467: Race condition in Updater |
| CVE-2026-87468 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87468: Incorrect authorization in Isolated |
| CVE-2026-87469 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87469: Improper input validation in Extensions |
| CVE-2026-87470 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87470: Improper quantity validation in Tint |
| CVE-2026-87471 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker |
| CVE-2026-87472 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87472: Improper input validation in FedCM |
| CVE-2026-87473 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87473: Incorrect authorization in FileHandling |
| CVE-2026-87474 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87474: Use after free in Payments |
| CVE-2026-87475 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87475: Missing authorization in Omnibox |
| CVE-2026-87476 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87476: Incorrect authorization in Loader |
| CVE-2026-87477 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87477: Information leak in Core |
| CVE-2026-87478 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87478: Observable discrepancy in Autofill |
| CVE-2026-87479 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions |
| CVE-2026-87480 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87480: Use after free in Printing |
| CVE-2026-87484 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87484: UI misrepresentation in Geometry |
| CVE-2026-87485 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87485: Incorrect authorization in CORS |
| CVE-2026-87487 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87487: Missing authorization in FileSystem |
| CVE-2026-87490 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87490: Information leak in Transactions Platform |
| CVE-2026-87492 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87492: Incorrect authorization in DevTools |
| CVE-2026-87493 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87493: Missing authorization in FileSystem |
| CVE-2026-87494 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87494: Use after free in Browser |
| CVE-2026-87495 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87495: Information leak in Scroll |
| CVE-2026-87496 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87496: UI misrepresentation in Browser |
| CVE-2026-87497 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87497: Uninitialized resource in Codecs |
| CVE-2026-87498 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87498: Missing authorization in WebUI |
| CVE-2026-87499 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-87499: Incorrect authorization in Network |
| CVE-2026-87500 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87500: Improper validation of array index in ANGLE |
| CVE-2026-87501 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87501: UI misrepresentation in Passwords |
| CVE-2026-87502 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87502: Confused deputy in Fullscreen |
| CVE-2026-87504 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87504: Use after free in Core |
| CVE-2026-87505 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87505: Incorrect authorization in FileSystem |
| CVE-2026-87506 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87506: Privilege elevation in WebUI |
| CVE-2026-87507 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87507: UI misrepresentation in Downloads |
| CVE-2026-87508 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87508: Incorrect authorization in Loader |
| CVE-2026-87509 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87509: Incorrect authorization in Updater |
| CVE-2026-87510 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87510: Improper input validation in FileAPI |
| CVE-2026-87511 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87511: Missing authorization in DevTools |
| CVE-2026-87512 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87512: Use after free in ANGLE |
| CVE-2026-87513 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87513: Missing authorization in ControlledFrame |
| CVE-2026-87514 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87514: Use after free in Views |
| CVE-2026-87515 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87515: Incorrect authorization in FileAPI |
| CVE-2026-87516 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87516: Observable discrepancy in Navigation |
| CVE-2026-87519 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing |
| CVE-2026-87521 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87521: Information leak in WebMCP |
| CVE-2026-87523 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87523: Race condition in DataTransfer |
| CVE-2026-87524 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87524: Use after free in Core |
| CVE-2026-87525 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87525: Out of bounds read in Chromoting |
| CVE-2026-87526 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87526: Use after free in Passwords |
| CVE-2026-87527 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87527: Buffer overflow in WebGL |
| CVE-2026-87528 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87528: Type confusion in Rust |
| CVE-2026-87529 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87529: Numeric truncation error in Media |
| CVE-2026-87530 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider |
| CVE-2026-87531 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87531: Information leak in CORS |
| CVE-2026-87532 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87532: Improper state validation in Safebrowsing |
| CVE-2026-87533 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87533: Use after free in DevTools |
| CVE-2026-87535 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87535: Information loss or omission in Safebrowsing |
| CVE-2026-87537 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87537: Missing authorization in Extensions |
| CVE-2026-87538 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87538: Clickjacking in Input |
| CVE-2026-87539 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-87539: Observable discrepancy in Network |
| CVE-2026-87540 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87540: Incorrect authorization in Isolated |
| CVE-2026-87541 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87541: Information leak in Navigation |
| CVE-2026-87542 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87542: Use after free in Input |
| CVE-2026-87543 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87543: Missing authorization in Core |
| CVE-2026-87544 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87544: Incorrect authorization in Extensions |
| CVE-2026-87546 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing |
| CVE-2026-87547 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem |
| CVE-2026-87548 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87548: Improper state validation in Installer |
| CVE-2026-87549 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87549: Incomplete cleanup in Downloads |
| CVE-2026-87550 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS |
| CVE-2026-87551 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87551: Improper certificate validation in CORS |
| CVE-2026-87553 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87553: Improper input validation in SiteIsolation |
| CVE-2026-87554 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87554: Race condition in Chromoting |
| CVE-2026-87556 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87556: Missing authorization in Browser |
| CVE-2026-87557 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess |
| CVE-2026-87558 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87558: Use after free in Payments |
| CVE-2026-87559 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87559: UI misrepresentation in UI |
| CVE-2026-87560 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87560: Missing authorization in Browser |
| CVE-2026-87561 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87561: Incorrect authorization in Web Authentication |
| CVE-2026-87562 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility |
| CVE-2026-87563 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87563: Origin validation error in Paint |
| CVE-2026-87565 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87565: Information leak in Passwords |
| CVE-2026-87566 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87566: Observable discrepancy in Layout |
| CVE-2026-87567 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting |
| CVE-2026-87568 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87568: Improper input validation in Chromium |
| CVE-2026-87569 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87569: Missing authorization in Views |
| CVE-2026-87570 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation |
| CVE-2026-87571 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87571: Improper certificate validation in Loader |
| CVE-2026-87572 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87572: Injection in DevTools |
| CVE-2026-87573 | Normal | — | — | — | Network / infra servers | Edge / Chromium | Chromium CVE-2026-87573: Improper input validation in Network |
| CVE-2026-87574 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87574: Information leak in ServiceWorker |
| CVE-2026-87575 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87575: Incorrect authorization in Loader |
| CVE-2026-87577 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87577: Incorrect authorization in Isolated |
| CVE-2026-87578 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87578: Use after free in Receiver |
| CVE-2026-87579 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87579: Buffer overflow in WebRTC |
| CVE-2026-87580 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls |
| CVE-2026-87581 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87581: Use after free in Payments |
| CVE-2026-87582 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87582: Confused deputy in DataTransfer |
| CVE-2026-87583 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87583: UI misrepresentation in Passwords |
| CVE-2026-87584 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87584: Incorrect authorization in WebUI |
| CVE-2026-87585 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87585: Double free in PDFium |
| CVE-2026-87586 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87586: Out of bounds read in ANGLE |
| CVE-2026-87588 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87588: Use after free in Chromecast |
| CVE-2026-87589 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation |
| CVE-2026-87590 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87590: Improper input validation in Passwords |
| CVE-2026-87591 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87591: Incorrect authorization in Extensions |
| CVE-2026-87592 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87592: Out of bounds read in Tint |
| CVE-2026-87593 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87593: Information leak in Editing |
| CVE-2026-87594 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87594: Incorrect authorization in DataTransfer |
| CVE-2026-87596 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87596: Out of bounds read in ANGLE |
| CVE-2026-87598 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker |
| CVE-2026-87599 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87599: Improper input validation in Interstitials |
| CVE-2026-87600 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87600: Improper input validation in Safebrowsing |
| CVE-2026-87602 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87602: Out of bounds read in ANGLE |
| CVE-2026-87603 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87603: Missing authorization in FileSystem |
| CVE-2026-87604 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87604: Out of bounds read in ANGLE |
| CVE-2026-87605 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87605: Missing authorization in Contacts |
| CVE-2026-87606 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87606: Missing authorization in SiteIsolation |
| CVE-2026-87608 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87608: Improper certificate validation in FedCM |
| CVE-2026-87609 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87609: Use after free in Sharing |
| CVE-2026-87610 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87610: Incorrect authorization in Omnibox |
| CVE-2026-87611 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87611: Missing authorization in FileSystem |
| CVE-2026-87613 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions |
| CVE-2026-87614 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker |
| CVE-2026-87615 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87615: Race condition in Payments |
| CVE-2026-87616 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87616: Improper initialization in Views |
| CVE-2026-87617 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87617: Use after free in DevTools |
| CVE-2026-87618 | Normal | — | — | — | Endpoints / Windows client | Edge / Chromium | Chromium CVE-2026-87618: Incorrect reference resolution in Storage |
| CVE-2026-87619 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87619: Observable discrepancy in Prefetch |
| CVE-2026-87620 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87620: Observable discrepancy in SVG |
| CVE-2026-87621 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87621: Out of bounds write in ANGLE |
| CVE-2026-87622 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87622: Missing authorization in FedCM |
| CVE-2026-87623 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87623: Observable discrepancy in DOM |
| CVE-2026-87624 | Normal | — | — | — | Office / productivity | Edge / Chromium | Chromium CVE-2026-87624: UI misrepresentation in Passwords |
| CVE-2026-87626 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials |
| CVE-2026-87627 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing |
| CVE-2026-87628 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87628: Use after free in Cast |
| CVE-2026-87629 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87629: Incorrect authorization in Sources |
| CVE-2026-87630 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87630: Integer overflow in WebRTC |
| CVE-2026-87631 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87631: Missing authorization in DOM |
| CVE-2026-87632 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI |
| CVE-2026-87633 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87633: Use after free in Views |
| CVE-2026-87634 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87634: Use after free in WebPackaging |
| CVE-2026-87635 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87635: UI misrepresentation in Payments |
| CVE-2026-87636 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87636: Type confusion in XML |
| CVE-2026-87637 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87637: Use after free in Extensions |
| CVE-2026-87638 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87638: Out of bounds write in Media |
| CVE-2026-87639 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87639: Use after free in WebPackaging |
| CVE-2026-87641 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87641: Race condition in Browser |
| CVE-2026-87642 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87642: Uninitialized resource in WebGL |
| CVE-2026-87644 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87644: Incorrect authorization in Views |
| CVE-2026-87645 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87645: Improper state validation in Safebrowsing |
| CVE-2026-87646 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87646: Use after free in Web Authentication |
| CVE-2026-87647 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87647: Uninitialized resource in GPU |
| CVE-2026-87648 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87648: Use after free in ANGLE |
| CVE-2026-87649 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87649: UI misrepresentation in Downloads |
| CVE-2026-87650 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87650: Out of bounds read in WebGL |
| CVE-2026-87651 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87651: Incorrect authorization in Paint |
| CVE-2026-87652 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87652: Incorrect authorization in PushAPI |
| CVE-2026-87653 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87653: UI misrepresentation in FullScreen |
| CVE-2026-87654 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87654: Buffer overflow in ANGLE |
| CVE-2026-87655 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87655: Clickjacking in Downloads |
| CVE-2026-87656 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87656: Improper state validation in Safebrowsing |
| CVE-2026-87657 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87657: Use after free in V8 |
| CVE-2026-87658 | Normal | — | — | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-87658: Information leak in Extensions |