Every CVE in this month's Microsoft Security Update document, ranked by composite priority. Search by CVE, product, or owner; filter by status or source; click a column to sort. 1415 Microsoft-authored, 0 Edge/Chromium and 345 Linux/other that patch via their own vendor.
77 rated Critical (Microsoft) and 97 rated Critical (everything else). The status filter below spans the whole document, so its Critical count is the combined 174.
| CVE | Status | CVSS | Severity | Impact | Owner | Source | Title |
|---|---|---|---|---|---|---|---|
| CVE-2026-96951 | Exploited | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Shell Security Feature Bypass Vulnerability |
| CVE-2026-108398 | Zero-day | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | .NET Framework Security Feature Bypass Vulnerability |
| CVE-2026-92707 | Zero-day worm | 5.3 | Moderate | Denial of Service | Other / general Windows | Microsoft | MessagePack-CSharp Denial of Service Vulnerability |
| CVE-2026-70229 | Critical worm | 8.1 | Critical | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-70571 | Critical worm | 8.1 | Critical | Remote Code Execution | Exchange / mail | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-100219 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft QUIC Remote Code Execution Vulnerability |
| CVE-2026-96934 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-96207 | Critical worm | 10.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Partner Center Elevation of Privilege Vulnerability |
| CVE-2026-94510 | Critical worm | 9.9 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Bookings Elevation of Privilege Vulnerability |
| CVE-2026-100202 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-105016 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft QUIC Remote Code Execution Vulnerability |
| CVE-2026-70147 | Critical worm | 9.8 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-70153 | Critical worm | 9.8 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-70242 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-70291 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-77900 | Critical worm | 9.8 | Critical | Remote Code Execution | Cloud / M365 apps | Microsoft | Azure App Service Remote Code Execution Vulnerability |
| CVE-2026-88131 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Dataverse Remote Code Execution Vulnerability |
| CVE-2026-88156 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-88178 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-97016 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-97749 | Critical worm | 9.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-97814 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-21413 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2026-83943 | Critical worm | 8.7 | Critical | Information Disclosure | Cloud / M365 apps | Microsoft | Azure API Center Information Disclosure Vulnerability |
| CVE-2026-102866 | Critical worm | 8.1 | Critical | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-108457 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows PDF Remote Code Execution Vulnerability |
| CVE-2026-108460 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-69802 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability |
| CVE-2026-70187 | Critical worm | 8.1 | Critical | Remote Code Execution | Remote access / RDP | Microsoft | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-70269 | Critical worm | 8.1 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-88117 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88119 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88120 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88171 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88174 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-88185 | Critical worm | 8.1 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108131 | Critical worm | 7.5 | Critical | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-96222 | Critical worm | 7.4 | Critical | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-69435 | Critical | 9.6 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure SRE Agent Elevation of Privilege Vulnerability |
| CVE-2026-100209 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100210 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100211 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100220 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Video Decoder Remote Code Execution Vulnerability |
| CVE-2026-102225 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-102855 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-102856 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-102857 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-105718 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-108400 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-108467 | Critical | 8.8 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-70215 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-83934 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2026-88144 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-96202 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2026-96943 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2026-96952 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-97739 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97745 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97755 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97759 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97765 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97778 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97780 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-83947 | Critical | 7.7 | Critical | Spoofing | Cloud / M365 apps | Microsoft | Azure Event Grid Spoofing Vulnerability |
| CVE-2026-88207 | Critical | 7.5 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-102214 | Critical | 8.8 | Critical | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-105733 | Critical | 8.8 | Critical | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-108471 | Critical | 8.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-70250 | Critical | 8.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Client Remote Code Execution Vulnerability |
| CVE-2026-88073 | Critical | 8.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96913 | Critical | 8.8 | Critical | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96914 | Critical | 8.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-100215 | Critical | 7.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-108130 | Critical | 7.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-88074 | Critical | 7.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-69789 | Critical | 7.5 | Critical | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-108399 | Critical | 7.2 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-102211 | Critical | 7.0 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| CVE-2026-62840 | Critical | 7.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Linux Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83917 | Critical | 7.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows ALPC Elevation of Privilege Vulnerability |
| CVE-2026-56154 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} |
| CVE-2026-56857 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Root.Mkdir(All) can follow junctions out of the root on Windows in os |
| CVE-2026-57941 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy |
| CVE-2026-59797 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function |
| CVE-2026-98167 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix server->total_read for compound encrypted PDUs |
| CVE-2026-98168 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix reparse buffer bounds in cifs_query_reparse_point() |
| CVE-2026-98170 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() |
| CVE-2026-98171 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs |
| CVE-2026-98172 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix smbd_connection leak on cifs_get_tcp_session() error |
| CVE-2026-98174 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | smb: client: fix rlist race and missing initialization |
| CVE-2026-98176 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc |
| CVE-2026-98177 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/amdkfd: Avoid integer underflow in EOP ring size calculation. |
| CVE-2026-98179 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/amdgpu: fix rmmio iounmap skipped on device removal |
| CVE-2026-98180 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/msm: RCU-free the scheduler-containing ring and VM objects |
| CVE-2026-98181 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/gud: fix out-of-bounds write in gud_plane_atomic_check() |
| CVE-2026-98186 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length |
| CVE-2026-98187 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST |
| CVE-2026-98188 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: p54: validate curve data length in the calibration curve converters |
| CVE-2026-98191 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: wlcore: release runtime PM ref on regdomain config failure |
| CVE-2026-98192 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown |
| CVE-2026-98193 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: libipw: reject TKIP frames without a full MIC |
| CVE-2026-98199 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | hwmon: (pmbus/core) increase number of phases and add new mask |
| CVE-2026-98203 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Input: soc_button_array - check btns_desc->package.count |
| CVE-2026-98206 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Input: cyttsp5 - clamp the HID report size before memcpy |
| CVE-2026-98207 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | mmc: spi: reset bytes_xfered before retrying CRC failures |
| CVE-2026-98209 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | mmc: sdhci-of-aspeed: Remove children before releasing SDC resources |
| CVE-2026-98211 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | mmc: mmci: Fix use-after-free in busy-timeout work |
| CVE-2026-98212 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | mmc: hsq: Fix use-after-free in retry work |
| CVE-2026-98214 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | selinux: recheck intermediate backing files on mprotect() |
| CVE-2026-98215 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | selinux: preserve user SID across nested backing files |
| CVE-2026-98217 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | IB/mlx4: Fix use-after-free on pkey sysfs registration failure |
| CVE-2026-98221 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | KEYS: trusted: Fix tpm2_load_cmd() boundary check |
| CVE-2026-98222 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | KEYS: encrypted: fix integer overflow of datablob_len |
| CVE-2026-98232 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() |
| CVE-2026-98233 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net/packet: clear RX owner on VNET header error |
| CVE-2026-98238 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() |
| CVE-2026-98249 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc |
| CVE-2026-98251 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | openvswitch: avoid reallocating confirmed conntrack labels |
| CVE-2026-98252 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() |
| CVE-2026-98253 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/ucma: Serialize join and leave on copy_to_user failure |
| CVE-2026-98254 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | swiotlb: use the adjusted address for the highmem page lookup |
| CVE-2026-98255 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | tcp: exclude old ACKs from tcp fast path |
| CVE-2026-98263 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type |
| CVE-2026-98269 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | btrfs: abort transaction on failure to update inode for hole punching and reflinking |
| CVE-2026-98270 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm/amdgpu: check ras and obj before dereference |
| CVE-2026-98272 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: mvpp2: prevent buffer overflow in page_pool allocation |
| CVE-2026-98275 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: ethernet: cortina: Ack RX overrun interrupt correctly |
| CVE-2026-98279 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | btrfs: handle lack of space when cleaning up verity items |
| CVE-2026-98282 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba |
| CVE-2026-98283 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() |
| CVE-2026-98287 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | pppoatm: ensure a writable skb header and linear data |
| CVE-2026-98288 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: stmmac: fix TSO header length truncation |
| CVE-2026-98289 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). |
| CVE-2026-98292 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access |
| CVE-2026-98295 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | Bluetooth: coredump: Quiesce dump work on unregister |
| CVE-2026-98298 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() |
| CVE-2026-98301 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: bridge: mst: move switchdev call outside rcu |
| CVE-2026-98303 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup |
| CVE-2026-98304 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | net: bcmgenet: restore the hardware filters on open |
| CVE-2026-98308 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ALSA: hda: trace PCM open only after assigning a stream |
| CVE-2026-98311 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: virt_wifi: don't transfer operstate before register |
| CVE-2026-98316 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | ALSA: bcd2000: Fix race between rawmidi and disconnect |
| CVE-2026-98317 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. |
| CVE-2026-98319 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr |
| CVE-2026-98320 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | netfilter: flowtable: hold reference on ct until flow is released |
| CVE-2026-98321 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | netfilter: nf_nat: unregister and release hooks on error |
| CVE-2026-98322 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | netfilter: nft_nat: fully initialise new_addr in netmap setup |
| CVE-2026-98323 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/siw: Bound fragmented header copies by the remaining length |
| CVE-2026-98326 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: mesh: release the channel if start fails |
| CVE-2026-98327 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: mesh: reset the CSA state when leaving |
| CVE-2026-98328 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: add HE 6 GHz capability in the scan elems len |
| CVE-2026-98329 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: don't allow injecting frames wider than the chanctx |
| CVE-2026-98330 | Critical worm | 9.8 | Critical | — | Network / infra servers | Linux / other | wifi: cfg80211: get the wiphy out of a dying network namespace |
| CVE-2026-98331 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: unlist vifs when their netdev is unregistered |
| CVE-2026-98332 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: only operate on TDLS peers in the TDLS code |
| CVE-2026-98333 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: reset the LED state when ifup fails |
| CVE-2026-98335 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: abort chanswitch when leaving a mesh |
| CVE-2026-98336 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: don't offload TC setup on AP_VLAN interfaces |
| CVE-2026-98337 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: mac80211: don't start a ROC while scanning |
| CVE-2026-98338 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: cfg80211: ibss: ref BSS entry for joined event |
| CVE-2026-98339 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: cfg80211: don't filter by BSS type when removing stale entries |
| CVE-2026-98340 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: cfg80211: only group hidden BSSes with beacon entries |
| CVE-2026-98341 | Critical worm | 9.8 | Critical | — | Endpoints / Windows client | Linux / other | wifi: cfg80211: don't free driver-owned scan requests |
| CVE-2026-98345 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: cfg80211: check IP header size in cfg80211_classify8021d() |
| CVE-2026-98348 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: libipw: reject too-short association responses |
| CVE-2026-98351 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | wifi: virt_wifi: free skb when disconnected |
| CVE-2026-98352 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted |
| CVE-2026-98353 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables |
| CVE-2026-98362 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate |
| CVE-2026-98363 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS |
| CVE-2026-98365 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access |
| CVE-2026-98368 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | esp: downgrade zerocopy managed frags before mutating skb frags |
| CVE-2026-98370 | Critical worm | 9.8 | Critical | — | Other / general Windows | Linux / other | xfrm: fix compat ALLOCSPI request use-after-free |
| CVE-2026-78663 | Critical worm | 9.1 | Critical | — | Other / general Windows | Linux / other | Double flow control refund on HTTP/2 server streams in net/http |
| CVE-2026-108266 | Critical | — | Critical | — | Other / general Windows | Linux / other | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session |
| CVE-2026-108267 | Critical | — | Critical | — | Other / general Windows | Linux / other | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session |
| CVE-2026-83632 | Critical | — | Critical | — | Other / general Windows | Linux / other | Apache Thrift: C++ THttpTransport grows its line buffer without bound |
| CVE-2026-105010 | Normal worm | 9.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70024 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Internet Information Services Remote Code Execution Vulnerability |
| CVE-2026-83862 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Network Load Balancing Remote Code Execution Vulnerability |
| CVE-2026-83910 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-85806 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85809 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-96219 | Normal worm | 9.8 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
| CVE-2026-96864 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability |
| CVE-2026-88092 | Normal worm | 9.4 | Important | Tampering | Other / general Windows | Microsoft | ASP.NET Core Tampering Vulnerability |
| CVE-2026-96252 | Normal worm | 9.1 | Important | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-100222 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-102210 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-69634 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69639 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows libarchive Remote Code Execution Vulnerability |
| CVE-2026-69705 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69883 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69886 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-70096 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Rich Text Edit Control Remote Code Execution Vulnerability |
| CVE-2026-70157 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows System Information Console Remote Code Execution Vulnerability |
| CVE-2026-70300 | Normal worm | 9.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-83517 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-83519 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83578 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-83693 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83748 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83770 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-83780 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows CCFFilter Driver Remote Code Execution Vulnerability |
| CVE-2026-83782 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Shell Remote Code Execution Vulnerability |
| CVE-2026-83869 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-83935 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft XML Remote Code Execution Vulnerability |
| CVE-2026-84015 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability |
| CVE-2026-85792 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-85814 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-85928 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
| CVE-2026-88102 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Failover Cluster Remote Code Execution Vulnerability |
| CVE-2026-96096 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Player Remote Code Execution Vulnerability |
| CVE-2026-96113 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96320 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-96909 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows BitLocker Remote Code Execution Vulnerability |
| CVE-2026-96924 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows OLE Remote Code Execution Vulnerability |
| CVE-2026-97805 | Normal worm | 9.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Remote Code Execution Vulnerability |
| CVE-2026-97815 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-97816 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-70279 | Normal | 9.3 | Important | Spoofing | Exchange / mail | Microsoft | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-70188 | Normal worm | 9.1 | Important | Security Feature Bypass | Other / general Windows | Microsoft | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2026-100214 | Normal | 8.8 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
| CVE-2026-102217 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-88159 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability |
| CVE-2026-96940 | Normal | 8.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-105008 | Normal worm | 9.0 | Important | Spoofing | Other / general Windows | Microsoft | Windows Schannel Spoofing Vulnerability |
| CVE-2026-85818 | Normal worm | 9.0 | Important | Spoofing | Other / general Windows | Microsoft | Windows Schannel Spoofing Vulnerability |
| CVE-2026-100218 | Normal worm | 8.1 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Gateway Service Remote Code Execution Vulnerability |
| CVE-2026-105005 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Schannel Remote Code Execution Vulnerability |
| CVE-2026-69830 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69913 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2026-70013 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70038 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70062 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows libarchive Remote Code Execution Vulnerability |
| CVE-2026-70111 | Normal worm | 8.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70127 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-70175 | Normal worm | 8.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70197 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-83522 | Normal worm | 8.1 | Important | Spoofing | Other / general Windows | Microsoft | Windows IKE Extension Spoofing Vulnerability |
| CVE-2026-83674 | Normal worm | 8.1 | Important | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-83844 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Paint Remote Code Execution Vulnerability |
| CVE-2026-83914 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft XML Remote Code Execution Vulnerability |
| CVE-2026-84012 | Normal worm | 8.1 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-85371 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85799 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85926 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-88173 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability |
| CVE-2026-69918 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Core Messaging Elevation of Privilege Vulnerability |
| CVE-2026-102192 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2026-103558 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-103569 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows IKE Extension Information Disclosure Vulnerability |
| CVE-2026-103577 | Normal worm | 7.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft QUIC Security Feature Bypass Vulnerability |
| CVE-2026-105723 | Normal worm | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-105728 | Normal worm | 7.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Dynamics Business Central Information Disclosure Vulnerability |
| CVE-2026-58280 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-69454 | Normal worm | 7.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability |
| CVE-2026-69577 | Normal worm | 7.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability |
| CVE-2026-69651 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-70031 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows iSCSI Denial of Service Vulnerability |
| CVE-2026-70033 | Normal worm | 7.5 | Important | Denial of Service | Remote access / RDP | Microsoft | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
| CVE-2026-70058 | Normal worm | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70079 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70082 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70133 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-70155 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70159 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70163 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Denial of Service Vulnerability |
| CVE-2026-70181 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70186 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70281 | Normal worm | 7.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-83516 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
| CVE-2026-83635 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-83645 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-83647 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-83655 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Network Policy Server (NPS) Denial of Service Vulnerability |
| CVE-2026-83665 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-83670 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability |
| CVE-2026-83677 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Client Denial of Service Vulnerability |
| CVE-2026-83795 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-83843 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-83855 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows WLAN Service Denial of Service Vulnerability |
| CVE-2026-83860 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows GDI Denial of Service Vulnerability |
| CVE-2026-84008 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-84017 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-85319 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85321 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85322 | Normal worm | 7.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2026-85324 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85334 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
| CVE-2026-85353 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-85808 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-85891 | Normal worm | 7.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure HDInsight Information Disclosure Vulnerability |
| CVE-2026-87716 | Normal worm | 7.5 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Denial of Service Vulnerability |
| CVE-2026-96232 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | .NET Information Disclosure Vulnerability |
| CVE-2026-96233 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-96236 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-96245 | Normal worm | 7.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2026-96246 | Normal worm | 7.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Network Policy Server (NPS) Information Disclosure Vulnerability |
| CVE-2026-96248 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Host Guardian Service Denial of Service Vulnerability |
| CVE-2026-96325 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-96861 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Network Device Enrollment Service (NDES) Denial of Service Vulnerability |
| CVE-2026-96866 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Network Device Enrollment Service (NDES) Denial of Service Vulnerability |
| CVE-2026-96945 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2026-96958 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-96959 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-96960 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-97788 | Normal worm | 7.5 | Important | Information Disclosure | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability |
| CVE-2026-97801 | Normal worm | 7.5 | Important | Tampering | Other / general Windows | Microsoft | .NET Framework Tampering Vulnerability |
| CVE-2026-97830 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Internet Information Services Denial of Service Vulnerability |
| CVE-2026-83511 | Normal worm | 7.4 | Important | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-85922 | Normal worm | 7.4 | Important | Security Feature Bypass | Cloud / M365 apps | Microsoft | Azure Key Vault Security Feature Bypass Vulnerability |
| CVE-2026-102238 | Normal | 9.6 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-69452 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Enterprise App Management Elevation of Privilege Vulnerability |
| CVE-2026-100212 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-102203 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | RPC Runtime Remote Code Execution Vulnerability |
| CVE-2026-102226 | Normal | 8.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Dynamics Business Central Elevation of Privilege Vulnerability |
| CVE-2026-102235 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-102849 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-102850 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-102858 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office OneNote Remote Code Execution Vulnerability |
| CVE-2026-102860 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102861 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102862 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102863 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102869 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2026-102870 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | ASP.NET Core Remote Code Execution Vulnerability |
| CVE-2026-103572 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability |
| CVE-2026-103575 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-105007 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NDIS Elevation of Privilege Vulnerability |
| CVE-2026-105591 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105593 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105595 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105596 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105597 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105598 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105716 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105717 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105727 | Normal | 8.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2026-108458 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-108463 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2026-65674 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-69326 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Graphic Fonts Remote Code Execution Vulnerability |
| CVE-2026-69370 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-69521 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-69765 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storport Miniport Driver Remote Code Execution Vulnerability |
| CVE-2026-69943 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69985 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows libarchive Remote Code Execution Vulnerability |
| CVE-2026-70007 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Framework Remote Code Execution Vulnerability |
| CVE-2026-70035 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Framework Remote Code Execution Vulnerability |
| CVE-2026-70068 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-70069 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70089 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows GDI Remote Code Execution Vulnerability |
| CVE-2026-70098 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-70149 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability |
| CVE-2026-70158 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-70167 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-70174 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-70210 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows OLE DB Elevation of Privilege Vulnerability |
| CVE-2026-70246 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70254 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-70256 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-70257 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-70258 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-70262 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-70266 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70268 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70275 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
| CVE-2026-70282 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-70287 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70297 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Skype for Business Remote Code Execution Vulnerability |
| CVE-2026-70301 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70302 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70343 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability |
| CVE-2026-77496 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-77902 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-77910 | Normal | 8.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-83520 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-83523 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Image Acquisition Remote Code Execution Vulnerability |
| CVE-2026-83642 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-83643 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83688 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-83725 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Search Component Remote Code Execution Vulnerability |
| CVE-2026-83759 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
| CVE-2026-83778 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Internet Messaging API Remote Code Execution Vulnerability |
| CVE-2026-83784 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-83789 | Normal | 8.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-83797 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Remote Code Execution Vulnerability |
| CVE-2026-83851 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-83874 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Tracing Remote Code Execution Vulnerability |
| CVE-2026-83889 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-83891 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-83923 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-83928 | Normal | 8.8 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
| CVE-2026-83929 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows GDI Remote Code Execution Vulnerability |
| CVE-2026-85339 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-85363 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Framework Elevation of Privilege Vulnerability |
| CVE-2026-85817 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-85900 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-85903 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-85931 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
| CVE-2026-85936 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Shell Remote Code Execution Vulnerability |
| CVE-2026-87697 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-88075 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Configuration Manager Elevation of Privilege Vulnerability |
| CVE-2026-88112 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-88114 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-88115 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Server for NFS Remote Code Execution Vulnerability |
| CVE-2026-88116 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-88136 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability |
| CVE-2026-88142 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability |
| CVE-2026-88145 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-88150 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-88155 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-88157 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-88163 | Normal | 8.8 | — | Not a Vulnerability | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-88165 | Normal | 8.8 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-88166 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-88186 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-88196 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-88197 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-88198 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-88200 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-88202 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-88219 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-94512 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | SQL Server Remote Code Execution Vulnerability |
| CVE-2026-96044 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-96224 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-96230 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | ASP.NET Core Remote Code Execution Vulnerability |
| CVE-2026-96235 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-96251 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-96957 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | .NET Security Feature Bypass Vulnerability |
| CVE-2026-97003 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97004 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97007 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97008 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97010 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97011 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97012 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-97017 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97738 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97741 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97742 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97746 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97747 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97748 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97750 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97751 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97752 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97753 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97754 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97756 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97757 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97758 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97761 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97762 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97763 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97766 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97767 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97768 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97769 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97770 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97771 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97772 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97773 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97775 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97776 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97777 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97781 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office OneNote Remote Code Execution Vulnerability |
| CVE-2026-69673 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69718 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69733 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69783 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69880 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-69882 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69923 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AI Elevation of Privilege Vulnerability |
| CVE-2026-69926 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-70054 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-70060 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70103 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-70104 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70106 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70108 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70117 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70132 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Portable Device File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-70151 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-70218 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-70233 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-70245 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70255 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-70286 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-70303 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83669 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83699 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83704 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83732 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83735 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83761 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83763 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Input System Elevation of Privilege Vulnerability |
| CVE-2026-83768 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83769 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-83830 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83840 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83848 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83867 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-83896 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83902 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83927 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Registry Elevation of Privilege Vulnerability |
| CVE-2026-85804 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85832 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-85843 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-85848 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-85849 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-85850 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85884 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability |
| CVE-2026-85901 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85902 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-85906 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-85908 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85945 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88093 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-88118 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-88133 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability |
| CVE-2026-88147 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
| CVE-2026-88152 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-88191 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96911 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96929 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-97798 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Service Elevation of Privilege Vulnerability |
| CVE-2026-97799 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-97800 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Mobile Broadband Elevation of Privilege Vulnerability |
| CVE-2026-70194 | Normal worm | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | .NET Framework Security Feature Bypass Vulnerability |
| CVE-2026-67625 | Normal | 8.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68883 | Normal | 8.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-85886 | Normal | 8.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-85925 | Normal | 8.2 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Key Vault Client SDK Elevation of Privilege Vulnerability |
| CVE-2026-66822 | Normal worm | 5.9 | Important | Information Disclosure | Other / general Windows | Microsoft | .NET Information Disclosure Vulnerability |
| CVE-2026-69982 | Normal worm | 5.9 | Important | Security Feature Bypass | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability |
| CVE-2026-70005 | Normal worm | 5.9 | Important | Security Feature Bypass | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability |
| CVE-2026-70162 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-70196 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-85790 | Normal worm | 5.9 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft QUIC Information Disclosure Vulnerability |
| CVE-2026-88099 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2026-88132 | Normal worm | 5.9 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure Key Vault Information Disclosure Vulnerability |
| CVE-2026-96300 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | RPC Endpoint Mapper Service Denial of Service Vulnerability |
| CVE-2026-83746 | Normal | 8.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Skype for Business Elevation of Privilege Vulnerability |
| CVE-2026-88094 | Normal | 8.1 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Azure Storage Library Elevation of Privilege Vulnerability |
| CVE-2026-97783 | Normal | 8.1 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-88164 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-69363 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-70213 | Normal | 8.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Power Apps Remote Code Execution Vulnerability |
| CVE-2026-85881 | Normal | 8.0 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Graphics Elevation of Privilege Vulnerability |
| CVE-2026-96956 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-70076 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70144 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70156 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70176 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70223 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Console Driver Elevation of Privilege Vulnerability |
| CVE-2026-70236 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70237 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70241 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-70249 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70253 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70271 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70273 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-72955 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Application Compatibility Cache Elevation of Privilege Vulnerability |
| CVE-2026-81971 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83505 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83509 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83510 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83580 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83717 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83724 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-83738 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-83750 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83785 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83793 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-83834 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83842 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83886 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-83899 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83921 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-84014 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85355 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85791 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-85802 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85855 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85870 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85941 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96939 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-85888 | Normal | 7.7 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-88081 | Normal | 7.7 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-105592 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105599 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-105714 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105715 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-69976 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69984 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69986 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69987 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69988 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69991 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69992 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69994 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69995 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69996 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69997 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69998 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70004 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70006 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70012 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70014 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Cryptographic Services Remote Code Execution Vulnerability |
| CVE-2026-70095 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70179 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70183 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70202 | Normal | 7.5 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70207 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-70251 | Normal | 7.5 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-83754 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-83856 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-87696 | Normal | 7.5 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-88083 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88206 | Normal | 7.5 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-96071 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Remote Code Execution Vulnerability |
| CVE-2026-96237 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | .NET Remote Code Execution Vulnerability |
| CVE-2026-97789 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-102234 | Normal | 7.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-105013 | Normal | 7.4 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-69945 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
| CVE-2026-70185 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-70299 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-70580 | Normal | 8.8 | Important | Spoofing | Other / general Windows | Microsoft | Windows Credential Guard Spoofing Vulnerability |
| CVE-2026-83716 | Normal | 8.8 | Important | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-83728 | Normal | 8.8 | Important | Spoofing | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Spoofing Vulnerability |
| CVE-2026-83771 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-83777 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-85905 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows UI Immersive Server API Elevation of Privilege Vulnerability |
| CVE-2026-96917 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
| CVE-2026-88204 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-70267 | Normal | 7.2 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-85798 | Normal | 7.2 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
| CVE-2026-83845 | Normal | 8.4 | Important | Spoofing | Other / general Windows | Microsoft | Windows Internet (wininet.dll) Spoofing Vulnerability |
| CVE-2026-102229 | Normal | 6.8 | Important | Information Disclosure | Other / general Windows | Microsoft | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-59116 | Normal | 6.8 | Important | Security Feature Bypass | Remote access / RDP | Microsoft | Windows Remote Desktop Security Feature Bypass Vulnerability |
| CVE-2026-85323 | Normal | 6.8 | Important | Spoofing | Network / infra servers | Microsoft | Network Device Enrollment Service (NDES) Spoofing Vulnerability |
| CVE-2026-97782 | Normal | 6.8 | Important | Tampering | SharePoint owners | Microsoft | Microsoft Office SharePoint Tampering Vulnerability |
| CVE-2026-85369 | Normal | 8.2 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-83945 | Normal | 6.6 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-85841 | Normal | 6.6 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70049 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Configuration Manager Elevation of Privilege Vulnerability |
| CVE-2026-83838 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
| CVE-2026-88121 | Normal | 8.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability |
| CVE-2026-96844 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-102199 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Microsoft Windows Codecs Library Denial of Service Vulnerability |
| CVE-2026-102865 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-102867 | Normal | 6.5 | Low | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-103576 | Normal | 6.5 | Important | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-105719 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2026-108127 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-108128 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-108129 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-67626 | Normal | 6.5 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-69877 | Normal | 6.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure DevOps Information Disclosure Vulnerability |
| CVE-2026-69922 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-69940 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Client for NFS Information Disclosure Vulnerability |
| CVE-2026-69955 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Client for NFS Information Disclosure Vulnerability |
| CVE-2026-69968 | Normal | 6.5 | Important | Tampering | Other / general Windows | Microsoft | Windows libarchive Tampering Vulnerability |
| CVE-2026-69973 | Normal | 6.5 | Important | Tampering | Other / general Windows | Microsoft | Windows libarchive Tampering Vulnerability |
| CVE-2026-70072 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Netlogon Denial of Service Vulnerability |
| CVE-2026-70119 | Normal | 6.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Remote Code Execution Vulnerability |
| CVE-2026-70166 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70170 | Normal | 6.5 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Windows Kernel Denial of Service Vulnerability |
| CVE-2026-70206 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-70219 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-70244 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Server Information Disclosure Vulnerability |
| CVE-2026-70259 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-70263 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-70298 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-83515 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | RPC Runtime Information Disclosure Vulnerability |
| CVE-2026-83521 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows IKE Extension Information Disclosure Vulnerability |
| CVE-2026-83648 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-83649 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
| CVE-2026-83651 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-83667 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-83683 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
| CVE-2026-83685 | Normal | 6.5 | Important | Denial of Service | Exchange / mail | Microsoft | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-83888 | Normal | 6.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-83906 | Normal | 6.5 | Important | Spoofing | Other / general Windows | Microsoft | Windows Shell Spoofing Vulnerability |
| CVE-2026-84007 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Remote Desktop Gateway Service Information Disclosure Vulnerability |
| CVE-2026-85331 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Association Service Information Disclosure Vulnerability |
| CVE-2026-85337 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-85797 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-85805 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-85821 | Normal | 6.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability |
| CVE-2026-85840 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Event Viewer Information Disclosure Vulnerability |
| CVE-2026-85847 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-85859 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Denial of Service Vulnerability |
| CVE-2026-85873 | Normal | 6.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Skype for Business Elevation of Privilege Vulnerability |
| CVE-2026-85932 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-87714 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | WebDAV Security Feature Bypass Vulnerability |
| CVE-2026-88122 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-88123 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-88125 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-88129 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-88130 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-88137 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | WebDAV Information Disclosure Vulnerability |
| CVE-2026-88151 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88153 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88154 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88167 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-88169 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-88172 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88175 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88183 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-88184 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88190 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88192 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88195 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88201 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-88203 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-94506 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Access Information Disclosure Vulnerability |
| CVE-2026-96204 | Normal | 6.5 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-96229 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | .NET Information Disclosure Vulnerability |
| CVE-2026-96238 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | .NET Security Feature Bypass Vulnerability |
| CVE-2026-96303 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-97740 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-97743 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-97760 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-97779 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-97813 | Normal | 6.5 | Important | Information Disclosure | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Information Disclosure Vulnerability |
| CVE-2026-97817 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97819 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97820 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97821 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97822 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97823 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97824 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97825 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97826 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97827 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97828 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97829 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97831 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97832 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97833 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97834 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97835 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97836 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97837 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97838 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97839 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97840 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97841 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97842 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97843 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-97844 | Normal | 6.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Role: DNS Server Information Disclosure Vulnerability |
| CVE-2026-96858 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Security Account Manager Tampering Vulnerability |
| CVE-2026-100217 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-102196 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102201 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-102202 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-102204 | Normal | 7.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability |
| CVE-2026-102205 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-102215 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-102216 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-102218 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-102220 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows VHD miniport driver Elevation of Privilege Vulnerability |
| CVE-2026-102227 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-102233 | Normal | 7.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-103553 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-103568 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Providers Elevation of Privilege Vulnerability |
| CVE-2026-105003 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-105004 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-108133 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-108136 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-49785 | Normal | 7.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | UEFI Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-61931 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Perception Simulation Service Elevation of Privilege Vulnerability |
| CVE-2026-68836 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows kernel32.dll Elevation of Privilege Vulnerability |
| CVE-2026-69354 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69471 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-69633 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69650 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Key Distribution Center Elevation of Privilege Vulnerability |
| CVE-2026-69798 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability |
| CVE-2026-69850 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Certificates Elevation of Privilege Vulnerability |
| CVE-2026-69867 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | SQLite Elevation of Privilege Vulnerability |
| CVE-2026-69884 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2026-69898 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69909 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft COM for Windows Elevation of Privilege Vulnerability |
| CVE-2026-69916 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69934 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69942 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69949 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-69950 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69952 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69953 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69957 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69959 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69963 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69966 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-70008 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows IP Over USB Service Elevation of Privilege Vulnerability |
| CVE-2026-70010 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-70015 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-70023 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-70027 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-70048 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-70051 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows SmartScreen Elevation of Privilege Vulnerability |
| CVE-2026-70052 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-70059 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-70064 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-70092 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70093 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Rich Text Edit Control Elevation of Privilege Vulnerability |
| CVE-2026-70102 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-70109 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70110 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70112 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-70113 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-70114 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70121 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70123 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-70131 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-70138 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-70139 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70142 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70143 | Normal | 7.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Network File System Remote Code Execution Vulnerability |
| CVE-2026-70172 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-70177 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70184 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-70220 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70222 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-70225 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70228 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-70238 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-70247 | Normal | 7.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | HTTP.sys Remote Code Execution Vulnerability |
| CVE-2026-70274 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-70278 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-70285 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70566 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Schannel Elevation of Privilege Vulnerability |
| CVE-2026-73027 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-78459 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Internet Information Services Elevation of Privilege Vulnerability |
| CVE-2026-81969 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-83499 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-83506 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-83508 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83513 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-83514 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-83518 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | RPC Runtime Elevation of Privilege Vulnerability |
| CVE-2026-83567 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83568 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83569 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-83570 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83579 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-83583 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Geotag Broker Elevation of Privilege Vulnerability |
| CVE-2026-83585 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83586 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
| CVE-2026-83587 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Core Messaging Elevation of Privilege Vulnerability |
| CVE-2026-83588 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-83634 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-83637 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83638 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-83639 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-83640 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-83641 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-83650 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-83652 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83654 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-83659 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2026-83678 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83679 | Normal | 7.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Windows Defender Firewall Service Elevation of Privilege Vulnerability |
| CVE-2026-83690 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83691 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-83692 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83698 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83700 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| CVE-2026-83709 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NTLM Elevation of Privilege Vulnerability |
| CVE-2026-83712 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-83721 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83726 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-83727 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83741 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Internet Explorer Elevation of Privilege Vulnerability |
| CVE-2026-83753 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-83756 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83757 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83758 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83762 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83767 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83779 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83781 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-83783 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-83791 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Virtual Input Elevation of Privilege Vulnerability |
| CVE-2026-83792 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Install Service Elevation of Privilege Vulnerability |
| CVE-2026-83796 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83826 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83828 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-83829 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83832 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-83833 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83836 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Event Tracing Remote Code Execution Vulnerability |
| CVE-2026-83837 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83847 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Account Elevation of Privilege Vulnerability |
| CVE-2026-83850 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83857 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-83859 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83861 | Normal | 7.8 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability |
| CVE-2026-83863 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-83872 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Local Elevation of Privilege Vulnerability |
| CVE-2026-83873 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-83876 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-83877 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Devices Human Interface Elevation of Privilege Vulnerability |
| CVE-2026-83881 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-83882 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83883 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83903 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83912 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83913 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83918 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83919 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Internet Messaging API Remote Code Execution Vulnerability |
| CVE-2026-83920 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83922 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83931 | Normal | 7.8 | Important | Remote Code Execution | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-83932 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-84013 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2026-84016 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows EAPHost Service Elevation of Privilege Vulnerability |
| CVE-2026-85318 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-85327 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-85332 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85338 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85340 | Normal | 7.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-85341 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-85343 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-85356 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-85358 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85359 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Performance Monitor Elevation of Privilege Vulnerability |
| CVE-2026-85366 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85368 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-85373 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
| CVE-2026-85375 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
| CVE-2026-85376 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-85377 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-85795 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Text Services Framework Elevation of Privilege Vulnerability |
| CVE-2026-85796 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85800 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-85807 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-85820 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-85822 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-85829 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability |
| CVE-2026-85833 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-85836 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85837 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85842 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-85851 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows SmartScreen Elevation of Privilege Vulnerability |
| CVE-2026-85858 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85860 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability |
| CVE-2026-85861 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85863 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85864 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Python Elevation of Privilege Vulnerability |
| CVE-2026-85867 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-85869 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-85871 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-85872 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage VSP Driver Elevation of Privilege Vulnerability |
| CVE-2026-85874 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-85911 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-85915 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
| CVE-2026-85927 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
| CVE-2026-85933 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-87691 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Services Elevation of Privilege Vulnerability |
| CVE-2026-87692 | Normal | 7.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-87694 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87695 | Normal | 7.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-87699 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winlogon Elevation of Privilege Vulnerability |
| CVE-2026-87700 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87702 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resource Management (MRM) Elevation of Privilege Vulnerability |
| CVE-2026-87706 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-87707 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Fax and Scan Service Elevation of Privilege Vulnerability |
| CVE-2026-87711 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87712 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability |
| CVE-2026-88070 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-88071 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-88072 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Host Guardian Service Elevation of Privilege Vulnerability |
| CVE-2026-88080 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88091 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-88100 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-88101 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
| CVE-2026-88105 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88109 | Normal | 7.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-88126 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-88128 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88134 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88135 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-88168 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88177 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88179 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88180 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88181 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88182 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-88188 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88189 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88193 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Scripting Engine Elevation of Privilege Vulnerability |
| CVE-2026-88194 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88210 | Normal | 7.8 | Important | Security Feature Bypass | Office / productivity | Microsoft | Microsoft Office Word Security Feature Bypass Vulnerability |
| CVE-2026-96108 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96118 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96186 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-96217 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96220 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Assigned Access Elevation of Privilege Vulnerability |
| CVE-2026-96223 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-96225 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-96231 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-96243 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2026-96244 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internal System User Profile Elevation of Privilege Vulnerability |
| CVE-2026-96249 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-96306 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Sysmain Service Elevation of Privilege Vulnerability |
| CVE-2026-96308 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96309 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-96312 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96317 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96318 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resume Elevation of Privilege Vulnerability |
| CVE-2026-96324 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96843 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-96847 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-96856 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-96862 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-96867 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-96912 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client License Service Elevation of Privilege Vulnerability |
| CVE-2026-96915 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-96916 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96918 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96920 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-96928 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96931 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96933 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-96946 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-96947 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-96950 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-96953 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability |
| CVE-2026-96995 | Normal | 7.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Word Elevation of Privilege Vulnerability |
| CVE-2026-96996 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-96997 | Normal | 7.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office OneNote Elevation of Privilege Vulnerability |
| CVE-2026-97001 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-97009 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97792 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-97794 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-97803 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-97804 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-97806 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97807 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97809 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97811 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-102231 | Normal | 7.7 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-105009 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-83739 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Bluetooth Service Remote Code Execution Vulnerability |
| CVE-2026-85811 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-87705 | Normal | 7.4 | Important | Security Feature Bypass | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Security Feature Bypass Vulnerability |
| CVE-2026-100207 | Normal | 7.3 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Azure CycleCloud Remote Code Execution Vulnerability |
| CVE-2026-105732 | Normal | 7.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-70161 | Normal | 7.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-70190 | Normal | 7.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-96188 | Normal | 7.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft PowerToys Elevation of Privilege Vulnerability |
| CVE-2026-100205 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-105729 | Normal | 7.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-83715 | Normal | 7.1 | Important | Tampering | Other / general Windows | Microsoft | Windows Error Reporting Tampering Vulnerability |
| CVE-2026-85856 | Normal | 7.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
| CVE-2026-100200 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-100201 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client License Service Elevation of Privilege Vulnerability |
| CVE-2026-100203 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-100216 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-100225 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102189 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102191 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102193 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102194 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-102195 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102197 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102207 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-102208 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-102209 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-102232 | Normal | 7.0 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-103554 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-103555 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-103565 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-105722 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-105725 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security App Elevation of Privilege Vulnerability |
| CVE-2026-108132 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-108134 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-108135 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-108396 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-108461 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-108464 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
| CVE-2026-108465 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
| CVE-2026-108468 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-109453 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-69387 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69596 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-69736 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Manager Elevation of Privilege Vulnerability |
| CVE-2026-69743 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-69763 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69766 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69795 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Clipboard Server Elevation of Privilege Vulnerability |
| CVE-2026-69840 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Certificates Elevation of Privilege Vulnerability |
| CVE-2026-69856 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69915 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69931 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69935 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69964 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69970 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69977 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
| CVE-2026-70021 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-70026 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-70045 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Work Folders Elevation of Privilege Vulnerability |
| CVE-2026-70056 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70066 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-70067 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70086 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70115 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70118 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70134 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2026-70136 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70140 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70150 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70160 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70164 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-70168 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70169 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
| CVE-2026-70198 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-70205 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-70209 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70212 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Center Elevation of Privilege Vulnerability |
| CVE-2026-70230 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70243 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70272 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70276 | Normal | 7.0 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-72934 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-72968 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-72969 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-83564 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83566 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83574 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83575 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83584 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-83644 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-83666 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability |
| CVE-2026-83675 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83676 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83680 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83682 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83687 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-83689 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83694 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-83696 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83701 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| CVE-2026-83702 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83707 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2026-83708 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83710 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-83718 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83720 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-83722 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
| CVE-2026-83740 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83749 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83751 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-83752 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83775 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83790 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83827 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-83839 | Normal | 7.0 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-83841 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83846 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-83852 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83853 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83866 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83868 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-83871 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-83879 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83900 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83901 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83908 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | RPC Runtime Elevation of Privilege Vulnerability |
| CVE-2026-83911 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-83915 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
| CVE-2026-83916 | Normal | 7.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83924 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83930 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-84018 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-84019 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-84020 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
| CVE-2026-85328 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2026-85329 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Account Elevation of Privilege Vulnerability |
| CVE-2026-85342 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85352 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85354 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-85357 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Phone Service Elevation of Privilege Vulnerability |
| CVE-2026-85361 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85362 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-85364 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85365 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-85367 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability |
| CVE-2026-85370 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85372 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85803 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-85810 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2026-85823 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Composite Image File System Elevation of Privilege Vulnerability |
| CVE-2026-85824 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Composite Image File System Elevation of Privilege Vulnerability |
| CVE-2026-85825 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-85826 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Fast FAT Driver Elevation of Privilege Vulnerability |
| CVE-2026-85827 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85828 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85834 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-85846 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Web Account Manager Elevation of Privilege Vulnerability |
| CVE-2026-85853 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85854 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85868 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85876 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-85879 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-85904 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85912 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85914 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Embedded Mode Service Elevation of Privilege Vulnerability |
| CVE-2026-85918 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
| CVE-2026-85919 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-85920 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-85930 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-85934 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-85943 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability |
| CVE-2026-87693 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87704 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87708 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87710 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
| CVE-2026-87715 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88076 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88079 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-88082 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-88088 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-88096 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DCOM Server Elevation of Privilege Vulnerability |
| CVE-2026-88098 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Support Provider Interface Elevation of Privilege Vulnerability |
| CVE-2026-88103 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88106 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88107 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88110 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88113 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88124 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88127 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Server Elevation of Privilege Vulnerability |
| CVE-2026-88139 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88141 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88146 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-88149 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-88160 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-88161 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
| CVE-2026-95943 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-96209 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Network File System Elevation of Privilege Vulnerability |
| CVE-2026-96215 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-96216 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96250 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96253 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96254 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96301 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96302 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96304 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96305 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96307 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96310 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96313 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-96319 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96322 | Normal | 7.0 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability |
| CVE-2026-96323 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-96852 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-96868 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96919 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-96923 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Workstation Service Elevation of Privilege Vulnerability |
| CVE-2026-96932 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Embedded Mode Service Elevation of Privilege Vulnerability |
| CVE-2026-96937 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96949 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-97774 | Normal | 7.0 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-97787 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-97793 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup and Deployment Elevation of Privilege Vulnerability |
| CVE-2026-97808 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97810 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-97812 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-102188 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-102206 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Portable Device MTP Driver Elevation of Privilege Vulnerability |
| CVE-2026-103578 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69947 | Normal | 6.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69958 | Normal | 6.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-83573 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-83776 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-83895 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-96863 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-102198 | Normal | 5.3 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Protocol Information Disclosure Vulnerability |
| CVE-2026-108466 | Normal | 5.3 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Windows Kernel Denial of Service Vulnerability |
| CVE-2026-69640 | Normal | 5.3 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Key Distribution Center Security Feature Bypass Vulnerability |
| CVE-2026-70025 | Normal | 5.3 | Important | Denial of Service | Identity / AD | Microsoft | Windows Netlogon Denial of Service Vulnerability |
| CVE-2026-85939 | Normal | 5.3 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows Kernel Security Feature Bypass Vulnerability |
| CVE-2026-88084 | Normal | 5.3 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-96234 | Normal | 5.3 | Important | Information Disclosure | Other / general Windows | Microsoft | .NET Information Disclosure Vulnerability |
| CVE-2026-69902 | Normal | 6.7 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-70165 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-70189 | Normal | 6.7 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-83706 | Normal | 6.7 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-85333 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Performance Monitor Elevation of Privilege Vulnerability |
| CVE-2026-88089 | Normal | 6.7 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88143 | Normal | 6.7 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-96938 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-69635 | Normal | 6.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70122 | Normal | 6.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-70148 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Information Disclosure Vulnerability |
| CVE-2026-70248 | Normal | 6.5 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-83636 | Normal | 6.5 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-83671 | Normal | 6.5 | Important | Information Disclosure | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Information Disclosure Vulnerability |
| CVE-2026-83703 | Normal | 6.5 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Windows Wi-Fi Driver Denial of Service Vulnerability |
| CVE-2026-96206 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Subsystem for Linux Information Disclosure Vulnerability |
| CVE-2026-105006 | Normal | 6.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-71347 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Center Elevation of Privilege Vulnerability |
| CVE-2026-88085 | Normal | 6.4 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67628 | Normal | 4.9 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-70217 | Normal | 4.9 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-94520 | Normal | 4.9 | Important | Denial of Service | Database / SQL | Microsoft | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-83646 | Normal | 4.8 | Important | Spoofing | Identity / AD | Microsoft | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-85916 | Normal | 6.2 | Important | Information Disclosure | Identity / AD | Microsoft | Azure Active Directory Information Disclosure Vulnerability |
| CVE-2026-102851 | Normal | 6.1 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-83500 | Normal | 6.1 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows BitLocker Security Feature Bypass Vulnerability |
| CVE-2026-102859 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-102864 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-88208 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-88209 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-105720 | Normal | 4.3 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-105713 | Normal | 5.7 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-85816 | Normal | 5.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Wi-Fi Driver Information Disclosure Vulnerability |
| CVE-2026-69978 | Normal | 5.6 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Microsoft Windows VMSwitch Denial of Service Vulnerability |
| CVE-2026-70097 | Normal | 5.6 | Important | Spoofing | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability |
| CVE-2026-83885 | Normal | 5.6 | Important | Spoofing | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability |
| CVE-2026-96865 | Normal | 5.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Secure Kernel Mode Information Disclosure Vulnerability |
| CVE-2026-102187 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-103560 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Role: DNS Server Tampering Vulnerability |
| CVE-2026-103567 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Information Disclosure Vulnerability |
| CVE-2026-105726 | Normal | 5.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Defender Information Disclosure Vulnerability |
| CVE-2026-105731 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| CVE-2026-108462 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-62687 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Backup Engine Information Disclosure Vulnerability |
| CVE-2026-62879 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows SmartScreen Tampering Vulnerability |
| CVE-2026-69644 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows iSCSI Information Disclosure Vulnerability |
| CVE-2026-69675 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Network File System Information Disclosure Vulnerability |
| CVE-2026-69721 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows iSCSI Information Disclosure Vulnerability |
| CVE-2026-69905 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows AppX Deployment Service Tampering Vulnerability |
| CVE-2026-69914 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows AppX Deployment Service Information Disclosure Vulnerability |
| CVE-2026-69919 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Cryptographic Services Information Disclosure Vulnerability |
| CVE-2026-69954 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-69967 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-69971 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Information Disclosure Vulnerability |
| CVE-2026-69979 | Normal | 5.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows AppX Deployment Service Security Feature Bypass Vulnerability |
| CVE-2026-69999 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Update Information Disclosure Vulnerability |
| CVE-2026-70011 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows IP Over USB Service Information Disclosure Vulnerability |
| CVE-2026-70017 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Secure Kernel Mode Information Disclosure Vulnerability |
| CVE-2026-70041 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Information Disclosure Vulnerability |
| CVE-2026-70044 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Information Disclosure Vulnerability |
| CVE-2026-70055 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Cryptographic Services Information Disclosure Vulnerability |
| CVE-2026-70057 | Normal | 5.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability |
| CVE-2026-70071 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Role: DNS Server Tampering Vulnerability |
| CVE-2026-70074 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-70083 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Role: DNS Server Tampering Vulnerability |
| CVE-2026-70084 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Projected File System Information Disclosure Vulnerability |
| CVE-2026-70085 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Role: DNS Server Tampering Vulnerability |
| CVE-2026-70087 | Normal | 5.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Role: DNS Server Security Feature Bypass Vulnerability |
| CVE-2026-70090 | Normal | 5.5 | Important | Information Disclosure | Identity / AD | Microsoft | Windows Netlogon Information Disclosure Vulnerability |
| CVE-2026-70128 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | HID Parser Library Information Disclosure Vulnerability |
| CVE-2026-70135 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Remote POS Driver Information Disclosure Vulnerability |
| CVE-2026-70137 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
| CVE-2026-70141 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-70173 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-70199 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-70201 | Normal | 5.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-70208 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-70211 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70214 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-70216 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Mobile Device Management Tampering Vulnerability |
| CVE-2026-70227 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Association Service Information Disclosure Vulnerability |
| CVE-2026-70232 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-70234 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Desktop Window Manager Information Disclosure Vulnerability |
| CVE-2026-70235 | Normal | 5.5 | Important | Spoofing | Other / general Windows | Microsoft | Windows Event Tracing Spoofing Vulnerability |
| CVE-2026-70260 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Trace Data Helper Information Disclosure Vulnerability |
| CVE-2026-70261 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Trace Data Helper Information Disclosure Vulnerability |
| CVE-2026-70264 | Normal | 5.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Defender Information Disclosure Vulnerability |
| CVE-2026-70270 | Normal | 5.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-70277 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Fast FAT File System Driver Information Disclosure Vulnerability |
| CVE-2026-70284 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70288 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70292 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70293 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70294 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-70295 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-81964 | Normal | 5.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Update Orchestrator Service Security Feature Bypass Vulnerability |
| CVE-2026-83507 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Update Orchestrator Service Information Disclosure Vulnerability |
| CVE-2026-83565 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
| CVE-2026-83571 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Audio Service Information Disclosure Vulnerability |
| CVE-2026-83657 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Tampering Vulnerability |
| CVE-2026-83658 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Error Reporting Information Disclosure Vulnerability |
| CVE-2026-83664 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Portable Device File System Driver Information Disclosure Vulnerability |
| CVE-2026-83668 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows WLAN Service Information Disclosure Vulnerability |
| CVE-2026-83681 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft PowerToys Tampering Vulnerability |
| CVE-2026-83686 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-83695 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-83705 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-83713 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability |
| CVE-2026-83714 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-83719 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Servicing Stack Updates Information Disclosure Vulnerability |
| CVE-2026-83723 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-83733 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-83736 | Normal | 5.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83737 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-83747 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Error Reporting Information Disclosure Vulnerability |
| CVE-2026-83755 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-83760 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Microsoft Bluetooth Driver Information Disclosure Vulnerability |
| CVE-2026-83764 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Clipboard User Service Information Disclosure Vulnerability |
| CVE-2026-83765 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows DWM Core Library Information Disclosure Vulnerability |
| CVE-2026-83773 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows MIDI Service Module Information Disclosure Vulnerability |
| CVE-2026-83787 | Normal | 5.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Windows DHCP Server Security Feature Bypass Vulnerability |
| CVE-2026-83794 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Portable Device MTP Driver Information Disclosure Vulnerability |
| CVE-2026-83798 | Normal | 5.5 | Important | Spoofing | Other / general Windows | Microsoft | Windows Update Stack Spoofing Vulnerability |
| CVE-2026-83835 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Common Log File System Driver Information Disclosure Vulnerability |
| CVE-2026-83849 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Hello Information Disclosure Vulnerability |
| CVE-2026-83854 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Notification Information Disclosure Vulnerability |
| CVE-2026-83864 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-83870 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Aggregated Data Platform Service Information Disclosure Vulnerability |
| CVE-2026-83875 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Human Interface Device Information Disclosure Vulnerability |
| CVE-2026-83884 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Human Interface Device Information Disclosure Vulnerability |
| CVE-2026-83887 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | HID Parser Library Information Disclosure Vulnerability |
| CVE-2026-83892 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Human Interface Device Information Disclosure Vulnerability |
| CVE-2026-83893 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Clipboard User Service Information Disclosure Vulnerability |
| CVE-2026-83898 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | HID Parser Library Information Disclosure Vulnerability |
| CVE-2026-83904 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | HID Parser Library Information Disclosure Vulnerability |
| CVE-2026-83907 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Hello Information Disclosure Vulnerability |
| CVE-2026-83933 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Update Orchestrator Service Information Disclosure Vulnerability |
| CVE-2026-84011 | Normal | 5.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Windows SMB Client Security Feature Bypass Vulnerability |
| CVE-2026-85320 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-85336 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Association Service Information Disclosure Vulnerability |
| CVE-2026-85374 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-85793 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Sysmain Service Information Disclosure Vulnerability |
| CVE-2026-85794 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2026-85812 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Information Disclosure Vulnerability |
| CVE-2026-85815 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Association Service Information Disclosure Vulnerability |
| CVE-2026-85830 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-85831 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Biometric Service Information Disclosure Vulnerability |
| CVE-2026-85835 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Servicing Stack Updates Information Disclosure Vulnerability |
| CVE-2026-85852 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-85857 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Information Disclosure Vulnerability |
| CVE-2026-85865 | Normal | 5.5 | Important | Security Feature Bypass | Network / infra servers | Microsoft | Windows DHCP Server Security Feature Bypass Vulnerability |
| CVE-2026-85909 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability |
| CVE-2026-85910 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows StateRepository API Information Disclosure Vulnerability |
| CVE-2026-85935 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Driver Information Disclosure Vulnerability |
| CVE-2026-85938 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Information Disclosure Vulnerability |
| CVE-2026-87698 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Remote Access Service Infrastructure Information Disclosure Vulnerability |
| CVE-2026-87709 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Host Guardian Service Tampering Vulnerability |
| CVE-2026-88140 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Key Storage Provider Information Disclosure Vulnerability |
| CVE-2026-88158 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Digest Authentication Information Disclosure Vulnerability |
| CVE-2026-88162 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Tampering Vulnerability |
| CVE-2026-95904 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Event Logging Service Information Disclosure Vulnerability |
| CVE-2026-96183 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Health and Optimized Experiences Service Information Disclosure Vulnerability |
| CVE-2026-96218 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Update Stack Tampering Vulnerability |
| CVE-2026-96247 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Information Disclosure Vulnerability |
| CVE-2026-96311 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Windows Network List Service Tampering Vulnerability |
| CVE-2026-96314 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Audio Service Information Disclosure Vulnerability |
| CVE-2026-96315 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Overlay Filter Tampering Vulnerability |
| CVE-2026-96316 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability |
| CVE-2026-96321 | Normal | 5.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Remote Desktop Display Driver Information Disclosure Vulnerability |
| CVE-2026-96846 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | WebDAV Information Disclosure Vulnerability |
| CVE-2026-96848 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability |
| CVE-2026-96849 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Information Disclosure Vulnerability |
| CVE-2026-96850 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Information Disclosure Vulnerability |
| CVE-2026-96851 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-96854 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Device Association Service Information Disclosure Vulnerability |
| CVE-2026-96855 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Tampering Vulnerability |
| CVE-2026-96857 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Projected File System Information Disclosure Vulnerability |
| CVE-2026-96859 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Imaging Component Information Disclosure Vulnerability |
| CVE-2026-96860 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Print Driver Information Disclosure Vulnerability |
| CVE-2026-96910 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Search Component Information Disclosure Vulnerability |
| CVE-2026-96921 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
| CVE-2026-96925 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-96926 | Normal | 5.5 | Important | Tampering | Network / infra servers | Microsoft | Role: DNS Server Tampering Vulnerability |
| CVE-2026-96927 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-96930 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability |
| CVE-2026-96935 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-96944 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storage Information Disclosure Vulnerability |
| CVE-2026-96948 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability |
| CVE-2026-97005 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-97014 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-97744 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-97790 | Normal | 5.5 | Important | Tampering | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability |
| CVE-2026-88086 | Normal | 5.3 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-102186 | Normal | 4.7 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Network File System Information Disclosure Vulnerability |
| CVE-2026-69506 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Key Storage Provider Information Disclosure Vulnerability |
| CVE-2026-69969 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows AppX Deployment Service Information Disclosure Vulnerability |
| CVE-2026-69974 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Desktop Window Manager Information Disclosure Vulnerability |
| CVE-2026-70063 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-70077 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-70195 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability |
| CVE-2026-83504 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows SmartScreen Information Disclosure Vulnerability |
| CVE-2026-83582 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-83656 | Normal | 4.7 | Important | Tampering | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Tampering Vulnerability |
| CVE-2026-83672 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-83697 | Normal | 4.7 | Important | Tampering | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Tampering Vulnerability |
| CVE-2026-83774 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability |
| CVE-2026-83786 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows NTFS Information Disclosure Vulnerability |
| CVE-2026-83865 | Normal | 4.7 | Important | Tampering | Other / general Windows | Microsoft | Windows Internet (wininet.dll) Tampering Vulnerability |
| CVE-2026-83897 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability |
| CVE-2026-83905 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Shell Information Disclosure Vulnerability |
| CVE-2026-83909 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability |
| CVE-2026-83925 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-84009 | Normal | 4.7 | Important | Tampering | Other / general Windows | Microsoft | Windows Projected File System Tampering Vulnerability |
| CVE-2026-85866 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows ALPC Information Disclosure Vulnerability |
| CVE-2026-96853 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability |
| CVE-2026-83788 | Normal | 4.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows rndismp6.sys Information Disclosure Vulnerability |
| CVE-2026-88226 | Normal | 4.6 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storage Port Driver Information Disclosure Vulnerability |
| CVE-2026-102221 | Normal | 4.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-70075 | Normal | 4.4 | Important | Security Feature Bypass | Virtualization / Hyper-V | Microsoft | Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability |
| CVE-2026-70280 | Normal | 4.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Hello Security Feature Bypass Vulnerability |
| CVE-2026-83926 | Normal | 4.4 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Hello Security Feature Bypass Vulnerability |
| CVE-2026-70116 | Normal | 4.2 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability |
| CVE-2026-83766 | Normal | 4.2 | Important | Security Feature Bypass | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Security Feature Bypass Vulnerability |
| CVE-2026-56153 | Normal worm | 9.4 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char |
| CVE-2026-59685 | Normal worm | 8.2 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM |
| CVE-2026-77214 | Normal worm | 8.2 | Important | — | Other / general Windows | Linux / other | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer |
| CVE-2026-98190 | Normal worm | 8.2 | Important | — | Other / general Windows | Linux / other | wifi: wilc1000: fix out-of-bounds read in P2P public action frames |
| CVE-2026-73636 | Normal worm | 8.1 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_auth_digest one-time-nonce replay attack |
| CVE-2026-107300 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | msgpack5: Many buffered values can exhaust the streaming decoder stack |
| CVE-2026-107302 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | msgpack5: Truncated map32 headers throw an unexpected error |
| CVE-2026-46729 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Linux / other | Apache HTTP Server: mod_heartmonitor denial of service |
| CVE-2026-47360 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_session: Session cookie not removed during internal redirect |
| CVE-2026-48005 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_auth_digest reauthentication attack |
| CVE-2026-56449 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_proxy_html: crash in dump_content |
| CVE-2026-56851 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Panic parsing crafted input in x/text/secure/precis in golang.org/x/text |
| CVE-2026-56866 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | HTTP/1 client connection desynchronization after CONNECT rejection in net/http |
| CVE-2026-63045 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_proxy_ftp PASV address handling |
| CVE-2026-63292 | Normal worm | 7.5 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_vhost_alias stack overflow |
| CVE-2026-63686 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_xml2enc crash on charset conversion failure |
| CVE-2026-67693 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU) |
| CVE-2026-78659 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | HTTP/2 server memory exhaustion due to Trailer headers in net/http |
| CVE-2026-78660 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | HTTP/2 transport accepts malformed framing-related headers in net/http |
| CVE-2026-78669 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Excessive CPU consumption from repeated initial window changes in net/http |
| CVE-2026-94440 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart |
| CVE-2026-95184 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Linux / other | Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS). |
| CVE-2026-95209 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Linux / other | An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). |
| CVE-2026-97031 | Normal worm | 7.5 | Important | — | Other / general Windows | Linux / other | Reject malformed ECH outer extension references in crypto/tls |
| CVE-2026-88647 | Normal worm | 7.4 | Important | — | Other / general Windows | Linux / other | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate. |
| CVE-2026-73637 | Normal worm | 7.3 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_auth_digest DoS attack |
| CVE-2026-89091 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution |
| CVE-2026-93546 | Normal | 8.8 | Important | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_dav_fs namespace overflow |
| CVE-2026-106585 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. |
| CVE-2026-107301 | Normal worm | 6.5 | Moderate | — | Other / general Windows | Linux / other | msgpack5: Partial options disable prototype protection |
| CVE-2026-107297 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | msgpack5: Quadratic parsing in the streaming decoder |
| CVE-2026-107299 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | msgpack5: Reserved byte can cause unbounded stream buffering |
| CVE-2026-107324 | Normal worm | 5.9 | Important | Denial of Service | Endpoints / Windows client | Linux / other | Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver |
| CVE-2026-107325 | Normal worm | 5.9 | Important | Denial of Service | Endpoints / Windows client | Linux / other | Application denial of service via missing BSON array length validation in MongoDB Go Driver |
| CVE-2026-97032 | Normal worm | 5.9 | Moderate | — | Other / general Windows | Linux / other | HTTP/2 server crash due to HPACK encoder race in net/http |
| CVE-2026-98175 | Normal | 8.1 | Important | — | Network / infra servers | Linux / other | smb: client: cancel reconnect work in clean_demultiplex_info() |
| CVE-2026-98261 | Normal | 8.1 | Important | — | Other / general Windows | Linux / other | cifs: Fix server use-after-free in cifs_chan_skip_or_disable() |
| CVE-2026-107298 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | msgpack5: Deeply nested input can exhaust the decoder stack |
| CVE-2026-58415 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_dav_fs property database read access |
| CVE-2026-79768 | Normal worm | 5.3 | Moderate | Information Disclosure | Other / general Windows | Linux / other | Apache HTTP Server: mod_userdir information disclosure |
| CVE-2026-98349 | Normal worm | 5.3 | Moderate | — | Other / general Windows | Linux / other | wifi: libipw: reject too-short beacon and probe responses |
| CVE-2026-87713 | Normal | 7.5 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Windows Bluetooth Port Driver Remote Code Execution |
| CVE-2026-107161 | Normal | 7.5 | Important | — | Other / general Windows | Linux / other | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients |
| CVE-2026-70126 | Normal | 7.1 | Important | Remote Code Execution | Endpoints / Windows client | Linux / other | Windows Bluetooth Port Driver Remote Code Execution |
| CVE-2026-108985 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored. |
| CVE-2026-70252 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Linux / other | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-46570 | Normal | 8.1 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata. |
| CVE-2026-102404 | Normal | 6.5 | Moderate | Denial of Service | Other / general Windows | Linux / other | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service |
| CVE-2026-102411 | Normal | 6.5 | Moderate | Denial of Service | Other / general Windows | Linux / other | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service |
| CVE-2026-103006 | Normal | 6.5 | Moderate | Denial of Service | Other / general Windows | Linux / other | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service |
| CVE-2026-107778 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() |
| CVE-2026-98229 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | xfrm: save input state data before secpath resets |
| CVE-2026-98306 | Normal | 6.5 | Moderate | — | Other / general Windows | Linux / other | seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation |
| CVE-2026-108976 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992. |
| CVE-2026-42616 | Normal | 7.8 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file. |
| CVE-2026-94444 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | Checksum bypass for golang.org/fips140 in cmd/go |
| CVE-2026-98194 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | wifi: libertas_tf: fix UAF in lbtf_free_adapter() |
| CVE-2026-98245 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() |
| CVE-2026-98248 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | arm64: percpu: Fix LSE operations on {8,16}-bit types |
| CVE-2026-98309 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | drm/vc4: Use managed KMS polling to fix UAF on unbind |
| CVE-2026-98342 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | dmaengine: wait for RCU readers before releasing dma_device |
| CVE-2026-98343 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() |
| CVE-2026-98359 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed |
| CVE-2026-98366 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | RDMA/rxe: validate access flags before swapping the MR's PD |
| CVE-2026-98378 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | bpf: Skip unsettled links in link iterator |
| CVE-2026-98381 | Normal | 7.8 | Important | — | Other / general Windows | Linux / other | veth: manage XDP program pointers during channel resize |
| CVE-2026-46569 | Normal | 7.7 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. |
| CVE-2026-107718 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | AdonisJS: Unencoded route parameters can produce open redirects |
| CVE-2026-106582 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. |
| CVE-2026-107296 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | msgpack5: Decoding negative int64 values mutates the input buffer |
| CVE-2026-42356 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories |
| CVE-2026-95210 | Normal worm | 3.7 | Low | — | Other / general Windows | Linux / other | Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. |
| CVE-2026-46572 | Normal | 7.4 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory. |
| CVE-2026-42617 | Normal | 7.1 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. |
| CVE-2026-42618 | Normal | 7.1 | Important | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file. |
| CVE-2026-98169 | Normal | 7.1 | Moderate | — | Network / infra servers | Linux / other | smb: client: fix potential OOB read in smb3_enum_snapshots() |
| CVE-2026-98189 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() |
| CVE-2026-98197 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove |
| CVE-2026-98200 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() |
| CVE-2026-98201 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Input: zero ff_effect before compat copy in input_ff_effect_from_user |
| CVE-2026-98204 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() |
| CVE-2026-98208 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | mmc: sdio_uart: fix xmit_fifo leak when the port table is full |
| CVE-2026-98210 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | mmc: mxcmmc: cancel data work and watchdog on remove |
| CVE-2026-98213 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | mmc: core: Cancel SDIO IRQ work before freeing host |
| CVE-2026-98218 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | i2c: atr: fix dangling adapter pointer on add failure |
| CVE-2026-98231 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | xfrm: serialize state GC with device state flush |
| CVE-2026-98234 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net/sched: hhf: cap hh_flows_limit at change time |
| CVE-2026-98236 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value |
| CVE-2026-98239 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | net: lan743x: fix RX checksum use-after-free |
| CVE-2026-98246 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_sync: Serialize local codec list cleanup |
| CVE-2026-98264 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | ALSA: virtio: reset device before deleting virtqueues |
| CVE-2026-98293 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() |
| CVE-2026-98294 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_qca: Do not write to the serial port after it is closed |
| CVE-2026-98357 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | IB/isert: wait for deferred control PDU completions before releasing the connection |
| CVE-2026-98360 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds |
| CVE-2026-98364 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | xfrm: hold net_device reference under RCU in bundle creation |
| CVE-2026-98369 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() |
| CVE-2026-98374 | Normal | 7.1 | Moderate | — | Other / general Windows | Linux / other | tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() |
| CVE-2026-98383 | Normal | 7.1 | Important | — | Other / general Windows | Linux / other | bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL |
| CVE-2026-105773 | Normal | 7.0 | Important | — | Other / general Windows | Linux / other | Canimaan Software ClamXAV local privilege escalation |
| CVE-2026-94447 | Normal | 7.0 | Moderate | — | Other / general Windows | Linux / other | Checksum database bypass for golang.org/toolchain in cmd/go |
| CVE-2026-103531 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow |
| CVE-2026-102407 | Normal | 5.4 | Moderate | — | Other / general Windows | Linux / other | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification |
| CVE-2026-88648 | Normal | 5.4 | Moderate | — | Other / general Windows | Linux / other | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates. |
| CVE-2026-19585 | Normal | 5.3 | Moderate | — | Other / general Windows | Linux / other | Go-getter vulnerable to a path traversal in S3/GCS directory download handling |
| CVE-2026-107708 | Normal | 4.9 | Moderate | — | Other / general Windows | Linux / other | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC |
| CVE-2026-108119 | Normal | 6.3 | Moderate | — | Other / general Windows | Linux / other | Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix |
| CVE-2026-98205 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | Input: evdev - zero absinfo before partial copy in EVIOCSABS |
| CVE-2026-98271 | Normal | 6.1 | Moderate | — | Other / general Windows | Linux / other | net: skbuff: do not leave stale header offsets after pskb_carve() |
| CVE-2026-106454 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | Twisted: IMAP wildcardToRegexp() ReDoS |
| CVE-2026-42528 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | Apache HTTP Server: mod_dav shared lock overflow |
| CVE-2026-106552 | Normal | 4.2 | Moderate | — | Other / general Windows | Linux / other | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. |
| CVE-2026-46571 | Normal | 5.5 | Moderate | — | Endpoints / Windows client | Linux / other | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file. |
| CVE-2026-61801 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files |
| CVE-2026-94448 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Reset context tracking on consecutive template expressions in html/template |
| CVE-2026-95512 | Normal | 5.5 | Moderate | Denial of Service | Other / general Windows | Linux / other | Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader |
| CVE-2026-98173 | Normal | 5.5 | Moderate | — | Network / infra servers | Linux / other | smb: client: fix use-after-free of iface in cifs_try_adding_channels() |
| CVE-2026-98182 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mac80211: refuse to make a monitor active when it has no queue |
| CVE-2026-98185 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mwifiex: validate scan response extents |
| CVE-2026-98195 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: iwlegacy: fix broadcast stations deallocation |
| CVE-2026-98198 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | hwmon: (pwm-fan) Stop RPM timer before freeing tach data |
| CVE-2026-98202 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound |
| CVE-2026-98216 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | IB/hfi1: Fix the PIO_CRED credit-return mmap |
| CVE-2026-98227 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | memstick: ms_block: destroy io_queue workqueue on removal |
| CVE-2026-98237 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain |
| CVE-2026-98241 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ipv6: xfrm: use full sockets in local error paths |
| CVE-2026-98247 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: hci_codec: validate vendor codec count length |
| CVE-2026-98257 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | rds: ib: use rds_conn_drop() on protocol version mismatch |
| CVE-2026-98260 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | exec: Cleanup POSIX timers right after de_thread() |
| CVE-2026-98262 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY |
| CVE-2026-98266 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ALSA: core: Fix potential UAF after asynchronous card release |
| CVE-2026-98273 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | x86/kprobes: Fix crash when probing CS CALL instructions |
| CVE-2026-98276 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: lock the socket in sock_gettstamp() |
| CVE-2026-98284 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | netlink: do not free nlk->groups while lockless readers can use it |
| CVE-2026-98285 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: bridge: vlan: fix bugs caused by switchdev deletion errors |
| CVE-2026-98286 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown |
| CVE-2026-98290 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup |
| CVE-2026-98299 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | tcp: do not let tcp_rmem be set below 4096 |
| CVE-2026-98300 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). |
| CVE-2026-98302 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net: fddi: skfp: fix NULL deref when setting the MAC address while down |
| CVE-2026-98307 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() |
| CVE-2026-98314 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | ALSA: pcm: set timer->private_data before registering the PCM timer |
| CVE-2026-98325 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mac80211: set up the TX info early to fix failure paths |
| CVE-2026-98334 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | wifi: mac80211: reset state when starting AP fails |
| CVE-2026-98344 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | dmaengine: Fix device kref underflow in dma_chan_put() |
| CVE-2026-98354 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/mad: Fix receive buffer leak when PKey enforcement fails |
| CVE-2026-98355 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/rtrs: guard against null kobj name |
| CVE-2026-98358 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | IB/iser: reject a remote invalidation of an unregistered direction |
| CVE-2026-98367 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept |
| CVE-2026-98377 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | vlan: require the MAC header to be present in __vlan_insert_inner_tag() |
| CVE-2026-98379 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | netfilter: ip6t_rpfilter: reject routes without inet6_dev |
| CVE-2026-98380 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | net/sched: reject IDR error pointers when deleting actions |
| CVE-2026-98382 | Normal | 5.5 | Moderate | — | Other / general Windows | Linux / other | bpf: Reject dev-bound-only programs on other devices |
| CVE-2026-107888 | Normal | 5.1 | Moderate | — | Other / general Windows | Linux / other | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this. |
| CVE-2026-98347 | Normal | 4.7 | Moderate | — | Other / general Windows | Linux / other | IB/IPoIB: Avoid restoring OPER_UP after multicast flush |
| CVE-2026-98265 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity |
| CVE-2026-98312 | Normal | 4.3 | Moderate | — | Other / general Windows | Linux / other | ALSA: 6fire: fix OOB write from device-reported iso length |
| CVE-2026-107655 | Normal | 4.0 | Low | Denial of Service | Other / general Windows | Linux / other | Cups: null pointer dereference via embedded job ticket comments allows remote denial of service |
| CVE-2026-105712 | Normal | 3.6 | Low | — | Other / general Windows | Linux / other | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk. |
| CVE-2026-106587 | Normal | 3.6 | Low | — | Other / general Windows | Linux / other | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. |
| CVE-2026-107885 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes. |
| CVE-2026-107890 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration. |
| CVE-2026-98384 | Normal | 3.3 | Low | — | Other / general Windows | Linux / other | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() |
| CVE-2026-106589 | Normal | 2.9 | Low | — | Other / general Windows | Linux / other | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices. |
| CVE-2026-105326 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | Cups: cups: argument injection in mailto notifier via notify-recipient-uri |
| CVE-2026-106583 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. |
| CVE-2026-106584 | Normal | 2.5 | Low | — | Other / general Windows | Linux / other | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. |
| CVE-2026-106586 | Normal | 2.5 | Low | — | Office / productivity | Linux / other | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. |
| CVE-2026-107886 | Normal | 2.3 | Low | Denial of Service | Other / general Windows | Linux / other | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges. |
| CVE-2026-106553 | Normal | 2.2 | Low | — | Other / general Windows | Linux / other | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. |
| CVE-2026-106555 | Normal | 2.2 | Low | — | Other / general Windows | Linux / other | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. |
| CVE-2026-102554 | Normal | — | Important | Denial of Service | Other / general Windows | Linux / other | Denial of Service via Eager Array Allocation During Deserialization in Guava |
| CVE-2026-106547 | Normal | — | Important | — | Other / general Windows | Linux / other | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata |
| CVE-2026-19029 | Normal | — | Moderate | — | Other / general Windows | Linux / other | HDF5 scale-offset filter heap buffer over-read via crafted chunk |
| CVE-2026-61373 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation |
| CVE-2026-61374 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit |
| CVE-2026-63772 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count |
| CVE-2026-66054 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize |
| CVE-2026-66055 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) |
| CVE-2026-66081 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages |
| CVE-2026-66331 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize |
| CVE-2026-66837 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length |
| CVE-2026-66858 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) |
| CVE-2026-66859 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route |
| CVE-2026-75818 | Normal | — | Low | — | Other / general Windows | Linux / other | Heap Buffer Overflow in GNU Aspell's prezip utility |
| CVE-2026-75819 | Normal | — | Low | — | Other / general Windows | Linux / other | Out-of-bounds Read in GNU Aspell |
| CVE-2026-75820 | Normal | — | Low | — | Other / general Windows | Linux / other | Integer Truncation Leading to Heap Corruption in GNU Aspell |
| CVE-2026-82458 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available |
| CVE-2026-82459 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process |
| CVE-2026-83663 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) |
| CVE-2026-83745 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) |
| CVE-2026-85086 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Perl TLS client disables certificate verification by default |
| CVE-2026-85087 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op |
| CVE-2026-85088 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match |
| CVE-2026-85476 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 |
| CVE-2026-85483 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end |
| CVE-2026-85493 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) |
| CVE-2026-85494 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) |
| CVE-2026-86535 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely |
| CVE-2026-86536 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript |
| CVE-2026-86537 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service |
| CVE-2026-87117 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec |
| CVE-2026-90440 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service |
| CVE-2026-91135 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) |
| CVE-2026-91137 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements |
| CVE-2026-92542 | Normal | — | Moderate | — | Network / infra servers | Linux / other | Blind VXLAN injection into encrypted overlay networks from cluster peer |
| CVE-2026-92543 | Normal | — | Important | — | Network / infra servers | Linux / other | Docker Engine insecure-registry fallback via malicious DNS responses |
| CVE-2026-92834 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: C++ WebSocket server transport does not read a full request length |
| CVE-2026-93318 | Normal | — | Important | — | Other / general Windows | Linux / other | Cache poisoning via unvalidated image layer DiffIDs |
| CVE-2026-93319 | Normal | — | Moderate | — | Other / general Windows | Linux / other | A malicious frontend can cause a daemon panic |
| CVE-2026-93320 | Normal | — | Moderate | — | Other / general Windows | Linux / other | BuildKit improperly handles special files in build snapshots |
| CVE-2026-93321 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Malformed LLB file operation can crash buildkitd |
| CVE-2026-93322 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Malformed MergeOp can crash the BuildKit daemon |
| CVE-2026-93323 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory |
| CVE-2026-93326 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Crafted Git build source can bypass certain policy validation |
| CVE-2026-93925 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id |
| CVE-2026-93926 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path |
| CVE-2026-94633 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length |
| CVE-2026-94634 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default |
| CVE-2026-94635 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name |
| CVE-2026-94636 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up |
| CVE-2026-94637 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame |
| CVE-2026-94638 | Normal | — | Moderate | — | Other / general Windows | Linux / other | Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` |
| CVE-2026-94639 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) |
| CVE-2026-94642 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception |
| CVE-2026-94644 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound |
| CVE-2026-94645 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound |
| CVE-2026-94646 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) |
| CVE-2026-94648 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound |
| CVE-2026-94650 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) |
| CVE-2026-94651 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error |
| CVE-2026-94652 | Normal | — | Low | — | Other / general Windows | Linux / other | Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back |
| CVE-2026-94653 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) |
| CVE-2026-94654 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame |
| CVE-2026-94655 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic |
| CVE-2026-94656 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound |
| CVE-2026-94657 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound |
| CVE-2026-94658 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) |
| CVE-2026-96277 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception |
| CVE-2026-96286 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Perl servers end `serve()` when serving one connection fails |
| CVE-2026-96287 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) |
| CVE-2026-96288 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) |
| CVE-2026-96289 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard |
| CVE-2026-96292 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) |
| CVE-2026-96294 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection |
| CVE-2026-96990 | Normal | — | Important | — | Other / general Windows | Linux / other | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound |
| ADV260001 | Normal | — | — | Not a Vulnerability | Other / general Windows | Linux / other | ADV260001 Hardening changes for ReFS volumes on removable media |
| CVE-2026-95838 | Normal | — | Moderate | — | Other / general Windows | Linux / other | containerd: Unpack DoS via repeated opaque whiteouts |