Every CVE in this month's Microsoft Security Update document, ranked by composite priority. Search by CVE, product, or owner; filter by status or source; click a column to sort. 1094 Microsoft-authored, 165 Edge/Chromium and 103 Linux/other that patch via their own vendor.
64 rated Critical (Microsoft) and 5 rated Critical (everything else). The status filter below spans the whole document, so its Critical count is the combined 69.
| CVE | Status | CVSS | Severity | Impact | Owner | Source | Title |
|---|---|---|---|---|---|---|---|
| CVE-2026-124194 | Exploited | 6.5 | Moderate | Spoofing | Office / productivity | Microsoft | Microsoft Outlook Spoofing Vulnerability |
| CVE-2026-123158 | Exploited worm | 8.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux. |
| CVE-2026-113862 | Critical worm | 8.1 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
| CVE-2026-119952 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Schannel Remote Code Execution Vulnerability |
| CVE-2026-119958 | Critical worm | 9.8 | Critical | Remote Code Execution | Identity / AD | Microsoft | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability |
| CVE-2026-119990 | Critical worm | 9.8 | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure OpenAI Elevation of Privilege Vulnerability |
| CVE-2026-112967 | Critical worm | 9.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Xbox Live Networking Service Remote Code Execution Vulnerability |
| CVE-2026-116928 | Critical worm | 9.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Search Remote Code Execution Vulnerability |
| CVE-2026-118146 | Critical | 8.8 | Critical | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-118207 | Critical | 8.8 | Critical | Remote Code Execution | Exchange / mail | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-109469 | Critical worm | 10.0 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Entra Device Registration Elevation of Privilege Vulnerability |
| CVE-2026-119961 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Internet Information Services Remote Code Execution Vulnerability |
| CVE-2026-118148 | Critical | 7.5 | Critical | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2026-109459 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-116710 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-118737 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2026-119951 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-119962 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows CredSSP Remote Code Execution Vulnerability |
| CVE-2026-119963 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-119964 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-119967 | Critical worm | 8.1 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-110043 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-110068 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-111309 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-110047 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110067 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111285 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111289 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-114169 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2026-118292 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118296 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118297 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118701 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118702 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118711 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118713 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118730 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-119969 | Critical | 8.8 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Graphic Fonts Remote Code Execution Vulnerability |
| CVE-2026-120003 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-120005 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-120786 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-120788 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-120789 | Critical | 8.8 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-122194 | Critical | 8.8 | Critical | Remote Code Execution | Cloud / M365 apps | Microsoft | Microsoft Defender Remote Code Execution Vulnerability |
| CVE-2026-113749 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
| CVE-2026-113825 | Critical | 7.5 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
| CVE-2026-124170 | Critical | 7.5 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-124185 | Critical | 7.5 | Critical | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-125136 | Critical | 8.8 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability |
| CVE-2026-113865 | Critical | 7.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-113753 | Critical | 8.2 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-113856 | Critical | 7.8 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-119382 | Critical | 7.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows TPM Elevation of Privilege Vulnerability |
| CVE-2026-119957 | Critical | 7.8 | Critical | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-125137 | Critical | 7.8 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-113752 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Print Spooler Components Remote Code Execution Vulnerability |
| CVE-2026-113859 | Critical | 7.5 | Critical | Remote Code Execution | Network / infra servers | Microsoft | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2026-113861 | Critical | 7.5 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-118145 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
| CVE-2026-119947 | Critical | 7.5 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-119960 | Critical | 7.5 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-119966 | Critical | 7.5 | Critical | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-125134 | Critical | 7.5 | Critical | Remote Code Execution | Other / general Windows | Microsoft | Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
| CVE-2026-113860 | Critical | 7.0 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-113864 | Critical | 6.4 | Critical | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-121035 | Critical | 9.6 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121035: Use after free |
| CVE-2026-121126 | Critical | 9.6 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121126: Use after free |
| CVE-2026-124040 | Critical worm | 8.1 | Critical | — | Linux / third-party (patch via OS vendor) | Linux / other | CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State |
| CVE-2026-121203 | Critical | 8.8 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121203: Use after free |
| CVE-2026-114160 | Critical | — | Critical | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Managed Grafana Elevation of Privilege Vulnerability |
| CVE-2026-76024 | Critical | 6.5 | Critical | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76024: Memory corruption |
| CVE-2026-116945 | Normal worm | 9.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88218 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Remote Code Execution Vulnerability |
| CVE-2026-88243 | Normal worm | 9.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-96077 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2026-85844 | Normal worm | 9.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-88234 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-95882 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-95901 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-96067 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Color Management Remote Code Execution Vulnerability |
| CVE-2026-96078 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Color Management Remote Code Execution Vulnerability |
| CVE-2026-96157 | Normal worm | 9.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-118740 | Normal worm | 9.1 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Aspire Security Feature Bypass Vulnerability |
| CVE-2026-121663 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-95962 | Normal worm | 9.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability |
| CVE-2026-70003 | Normal worm | 8.7 | Important | Security Feature Bypass | Database / SQL | Microsoft | JDBC Driver for SQL Server Security Feature Bypass Vulnerability |
| CVE-2026-118742 | Normal worm | 8.6 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Front Door Elevation of Privilege Vulnerability |
| CVE-2026-120002 | Normal | 9.9 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-102219 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
| CVE-2026-118106 | Normal worm | 8.1 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-118741 | Normal worm | 8.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-119945 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
| CVE-2026-66813 | Normal worm | 8.1 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-72998 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-81384 | Normal worm | 8.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-95885 | Normal worm | 8.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-95956 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows eSCL Scanner Remote Code Execution Vulnerability |
| CVE-2026-96092 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96177 | Normal worm | 8.1 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-109467 | Normal | 9.9 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2026-105512 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2026-105515 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Message Queuing Denial of Service Vulnerability |
| CVE-2026-105561 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
| CVE-2026-105579 | Normal worm | 7.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-109475 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-109478 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-112966 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Security Account Manager Denial of Service Vulnerability |
| CVE-2026-113823 | Normal worm | 7.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure CycleCloud Information Disclosure Vulnerability |
| CVE-2026-114147 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-114149 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-114154 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-116926 | Normal worm | 7.5 | Important | Spoofing | Other / general Windows | Microsoft | Microsoft Teams Spoofing Vulnerability |
| CVE-2026-116943 | Normal worm | 7.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-118153 | Normal worm | 7.5 | Important | Denial of Service | Exchange / mail | Microsoft | Microsoft Exchange Server Denial of Service Vulnerability |
| CVE-2026-118747 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-118748 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-118749 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-118750 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-119932 | Normal worm | 7.5 | Important | Denial of Service | Remote access / RDP | Microsoft | Windows Remote Desktop Denial of Service Vulnerability |
| CVE-2026-121680 | Normal worm | 7.5 | Important | Spoofing | Other / general Windows | Microsoft | Windows NTLM Spoofing Vulnerability |
| CVE-2026-69901 | Normal worm | 7.5 | Important | Spoofing | Other / general Windows | Microsoft | Microsoft Teams for Android Spoofing Vulnerability |
| CVE-2026-70240 | Normal worm | 7.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Kerberos Denial of Service Vulnerability |
| CVE-2026-83684 | Normal worm | 7.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows iSCSI Target Service Information Disclosure Vulnerability |
| CVE-2026-88236 | Normal worm | 7.5 | Important | Denial of Service | Other / general Windows | Microsoft | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2026-96134 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-96176 | Normal worm | 7.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-96972 | Normal worm | 7.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Server Information Disclosure Vulnerability |
| CVE-2026-120779 | Normal | 9.6 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-121662 | Normal | 8.6 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-114162 | Normal | 9.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Graph Elevation of Privilege Vulnerability |
| CVE-2026-109454 | Normal | 9.0 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-114146 | Normal | 9.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-80095 | Normal | 9.0 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-112745 | Normal | 6.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Azure DevOps Server Information Disclosure Vulnerability |
| CVE-2026-105518 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-105534 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Remote Code Execution Vulnerability |
| CVE-2026-105542 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-108401 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-108411 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft ODBC Driver Remote Code Execution Vulnerability |
| CVE-2026-109463 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Remote Code Execution Vulnerability |
| CVE-2026-109464 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-109472 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-109493 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-109494 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-109496 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-109499 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-109501 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-109502 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-109503 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-109505 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110044 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-110048 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-110050 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110054 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110055 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-110058 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-110059 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-110060 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-110061 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110062 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110064 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111290 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111294 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111295 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111298 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111299 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111301 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-111304 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111305 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-111306 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111307 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111308 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111310 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112714 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112715 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112716 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112717 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112718 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112719 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112721 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112722 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112723 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112724 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112726 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112727 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-112728 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112729 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112730 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112733 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112734 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-112735 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112737 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-112739 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112741 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112762 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-113814 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Remote Code Execution Vulnerability |
| CVE-2026-114151 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-114152 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-114158 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-114159 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-114164 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-114171 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-116717 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-116719 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116720 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116722 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116923 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116925 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116927 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-116930 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116934 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-116941 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116942 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116946 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-118105 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118109 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118110 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118120 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118141 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Client for NFS Remote Code Execution Vulnerability |
| CVE-2026-118149 | Normal | 8.8 | Important | Remote Code Execution | Exchange / mail | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-118150 | Normal | 8.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-118154 | Normal | 8.8 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-118293 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118294 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118295 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118298 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118299 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118302 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118700 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118703 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118704 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118705 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118706 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118707 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118708 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118709 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118710 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118712 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118714 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118715 | Normal | 8.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Excel Elevation of Privilege Vulnerability |
| CVE-2026-118716 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118717 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118718 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118719 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118720 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118721 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118722 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118724 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118725 | Normal | 8.8 | Important | Elevation of Privilege | Office / productivity | Microsoft | Microsoft Office Excel Elevation of Privilege Vulnerability |
| CVE-2026-118726 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118729 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118731 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118732 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118745 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Remote Code Execution Vulnerability |
| CVE-2026-119392 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-119824 | Normal | 8.8 | Important | Tampering | Remote access / RDP | Microsoft | Remote Desktop Client Tampering Vulnerability |
| CVE-2026-119839 | Normal | 8.8 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Client Elevation of Privilege Vulnerability |
| CVE-2026-119881 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft XPS Document Converter Elevation of Privilege Vulnerability |
| CVE-2026-119908 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Remote Code Execution Vulnerability |
| CVE-2026-119934 | Normal | 8.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-119950 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-119975 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-119983 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-119986 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-120001 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-120785 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-120790 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-120791 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-121665 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-122171 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft XPS Document Converter Remote Code Execution Vulnerability |
| CVE-2026-122176 | Normal | 8.8 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows SMB Remote Code Execution Vulnerability |
| CVE-2026-122198 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-122475 | Normal | 8.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Remote Code Execution Vulnerability |
| CVE-2026-123375 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123376 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123377 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123380 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123381 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123382 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123383 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123384 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123385 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-123390 | Normal | 8.8 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-123391 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-123394 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-124174 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-124176 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-124187 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-124228 | Normal | 8.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-67372 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67374 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67375 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67387 | Normal | 8.8 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-67391 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67632 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67637 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-67646 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-70094 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-85838 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-85839 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-85923 | Normal | 8.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure DevOps Server Elevation of Privilege Vulnerability |
| CVE-2026-88176 | Normal | 8.8 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-88222 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-88229 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Media Player Remote Code Execution Vulnerability |
| CVE-2026-88249 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Client for NFS Remote Code Execution Vulnerability |
| CVE-2026-94511 | Normal | 8.8 | Important | Remote Code Execution | Database / SQL | Microsoft | SQL Server Remote Code Execution Vulnerability |
| CVE-2026-95975 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Performance Counters Remote Code Execution Vulnerability |
| CVE-2026-95996 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-96002 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96010 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-96020 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96064 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96164 | Normal | 8.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-105501 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-105524 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-109473 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-112811 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-116714 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-119818 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Text Services Framework Elevation of Privilege Vulnerability |
| CVE-2026-119853 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Remote Access API Elevation of Privilege Vulnerability |
| CVE-2026-119886 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-119892 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119903 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83563 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winlogon Elevation of Privilege Vulnerability |
| CVE-2026-88230 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88235 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-88238 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-95874 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Xbox Gaming Services Elevation of Privilege Vulnerability |
| CVE-2026-95935 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95963 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Data Sharing Service Client Elevation of Privilege Vulnerability |
| CVE-2026-95983 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95988 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96126 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-97013 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-114156 | Normal worm | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2026-102224 | Normal | 8.4 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-119985 | Normal | 8.3 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-120780 | Normal | 8.3 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-121664 | Normal | 8.3 | Important | Remote Code Execution | Other / general Windows | Microsoft | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-119989 | Normal | 8.2 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Azure Pipelines Remote Code Execution Vulnerability |
| CVE-2026-105557 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DHCP Server Information Disclosure Vulnerability |
| CVE-2026-108425 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-114150 | Normal worm | 5.9 | Important | Information Disclosure | Other / general Windows | Microsoft | ASP.NET Core Information Disclosure Vulnerability |
| CVE-2026-116697 | Normal worm | 5.9 | Important | Denial of Service | Endpoints / Windows client | Microsoft | Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability |
| CVE-2026-118102 | Normal worm | 5.9 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-118213 | Normal worm | 5.9 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Deployment Services Information Disclosure Vulnerability |
| CVE-2026-119404 | Normal worm | 5.9 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Client for NFS Security Feature Bypass Vulnerability |
| CVE-2026-119909 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Internet Information Services Denial of Service Vulnerability |
| CVE-2026-119936 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Internet Information Services Denial of Service Vulnerability |
| CVE-2026-119946 | Normal worm | 5.9 | Important | Information Disclosure | Network / infra servers | Microsoft | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-119972 | Normal worm | 5.9 | Important | Denial of Service | Other / general Windows | Microsoft | Remote Procedure Call Denial of Service Vulnerability |
| CVE-2026-119991 | Normal worm | 5.9 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Configuration Manager Information Disclosure Vulnerability |
| CVE-2026-122474 | Normal worm | 5.9 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability |
| CVE-2026-122987 | Normal worm | 5.9 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability |
| CVE-2026-95913 | Normal worm | 5.9 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-96975 | Normal worm | 5.9 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-122979 | Normal | 8.1 | Important | Spoofing | Other / general Windows | Microsoft | Microsoft Teams for Android Spoofing Vulnerability |
| CVE-2026-109457 | Normal | 8.0 | Important | Remote Code Execution | Cloud / M365 apps | Microsoft | Azure CLI Remote Code Execution Vulnerability |
| CVE-2026-111296 | Normal | 8.0 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-111297 | Normal | 8.0 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-118111 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118112 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118113 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118117 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118118 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118119 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-122164 | Normal | 8.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-122988 | Normal | 8.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-123387 | Normal | 8.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2026-94513 | Normal | 8.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-112759 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-112791 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112798 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-112970 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-113819 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-119389 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-119398 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119992 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-122175 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-88242 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2026-94514 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95989 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | vhdmp.sys Elevation of Privilege Vulnerability |
| CVE-2026-113773 | Normal worm | 5.3 | Important | Spoofing | Network / infra servers | Microsoft | Windows DHCP Server Spoofing Vulnerability |
| CVE-2026-120796 | Normal worm | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | .NET Denial of Service Vulnerability |
| CVE-2026-105551 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-105558 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-105578 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft JScript Remote Code Execution Vulnerability |
| CVE-2026-108421 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2026-109481 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-109487 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-109491 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-109498 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-109500 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110052 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-110053 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111286 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-111287 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112793 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Event Collector Service Elevation of Privilege Vulnerability |
| CVE-2026-112972 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows SMBv3 Server Remote Code Execution Vulnerability |
| CVE-2026-112985 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows JScript Remote Code Execution Vulnerability |
| CVE-2026-113768 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Performance Counters Remote Code Execution Vulnerability |
| CVE-2026-116698 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-116718 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-116929 | Normal | 7.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-116931 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116937 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116938 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116947 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-118108 | Normal | 7.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118114 | Normal | 7.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118115 | Normal | 7.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118301 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-118735 | Normal | 7.5 | Important | Elevation of Privilege | Identity / AD | Microsoft | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2026-119837 | Normal | 7.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-119858 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-119880 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft XPS Document Converter Remote Code Execution Vulnerability |
| CVE-2026-119938 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Shell Remote Code Execution Vulnerability |
| CVE-2026-119944 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Mobile Device Management Elevation of Privilege Vulnerability |
| CVE-2026-119948 | Normal | 7.5 | Important | Remote Code Execution | Identity / AD | Microsoft | Windows Active Directory Remote Code Execution Vulnerability |
| CVE-2026-119995 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-119996 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-120000 | Normal | 7.5 | Important | Remote Code Execution | SharePoint owners | Microsoft | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-121660 | Normal | 7.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-122163 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Image Acquisition Remote Code Execution Vulnerability |
| CVE-2026-122177 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows iSCSI Elevation of Privilege Vulnerability |
| CVE-2026-123378 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-123379 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-124227 | Normal | 7.5 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-80094 | Normal | 7.5 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
| CVE-2026-84010 | Normal | 7.5 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-88111 | Normal | 7.5 | Important | Remote Code Execution | Database / SQL | Microsoft | SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88216 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-95964 | Normal | 7.5 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-96081 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Rich Text Edit Control Remote Code Execution Vulnerability |
| CVE-2026-96993 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Performance Monitor Remote Code Execution Vulnerability |
| CVE-2026-102230 | Normal | 7.4 | Important | Information Disclosure | Other / general Windows | Microsoft | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-105020 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105021 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105023 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105026 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105490 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105491 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105493 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105495 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105496 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105497 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105498 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105499 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105581 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-112805 | Normal | 8.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-113760 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows XWizard Framework Elevation of Privilege Vulnerability |
| CVE-2026-113863 | Normal | 8.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-118216 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118217 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118218 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118219 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118221 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118225 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118226 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118227 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118228 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118229 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118232 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118277 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118278 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118279 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118283 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-119862 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Input System Elevation of Privilege Vulnerability |
| CVE-2026-119916 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Input System Elevation of Privilege Vulnerability |
| CVE-2026-119925 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Text Services Framework Elevation of Privilege Vulnerability |
| CVE-2026-124226 | Normal | 8.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-95960 | Normal | 8.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-109497 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-109504 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-110045 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-110065 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-111300 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-111303 | Normal | 7.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-105520 | Normal | 7.2 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-105560 | Normal | 7.2 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-116933 | Normal | 7.2 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116936 | Normal | 7.2 | Important | Remote Code Execution | Database / SQL | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-116944 | Normal | 7.2 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118151 | Normal | 7.2 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-118157 | Normal | 7.2 | Important | Elevation of Privilege | Exchange / mail | Microsoft | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-102236 | Normal | 8.6 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-118208 | Normal | 7.1 | Important | Spoofing | Exchange / mail | Microsoft | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-119988 | Normal | 7.1 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows SMB Remote Code Execution Vulnerability |
| CVE-2026-108469 | Normal | 6.8 | Important | Spoofing | Other / general Windows | Microsoft | Microsoft Authentication Library for JavaScript Spoofing Vulnerability |
| CVE-2026-118746 | Normal | 6.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | .NET Security Feature Bypass Vulnerability |
| CVE-2026-109495 | Normal | 6.6 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-109466 | Normal | 8.0 | Important | Elevation of Privilege | SharePoint owners | Microsoft | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-88187 | Normal | 8.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
| CVE-2026-88240 | Normal | 8.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-96115 | Normal | 8.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-105559 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Denial of Service Vulnerability |
| CVE-2026-105568 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-108417 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-108418 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-108419 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-108424 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows GDI Information Disclosure Vulnerability |
| CVE-2026-109455 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-110046 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-110051 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-110057 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-110066 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-111288 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-111291 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-111292 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-111293 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-112731 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Information Disclosure Vulnerability |
| CVE-2026-112738 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-112795 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Security Account Manager Denial of Service Vulnerability |
| CVE-2026-112807 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
| CVE-2026-112808 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-113818 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Deployment Services Information Disclosure Vulnerability |
| CVE-2026-113822 | Normal | 6.5 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-116699 | Normal | 6.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
| CVE-2026-116721 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-116922 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office PowerPoint Information Disclosure Vulnerability |
| CVE-2026-116932 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-116935 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-118103 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-118104 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-118152 | Normal | 6.5 | Important | Spoofing | Exchange / mail | Microsoft | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-118300 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-118727 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-118728 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-119887 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-119889 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | ActiveSyncProvider Information Disclosure Vulnerability |
| CVE-2026-119940 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Kerberos Denial of Service Vulnerability |
| CVE-2026-119976 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability |
| CVE-2026-119982 | Normal | 6.5 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-119993 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-119998 | Normal | 6.5 | Important | Security Feature Bypass | Office / productivity | Microsoft | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2026-119999 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-121677 | Normal | 6.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-122196 | Normal | 6.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability |
| CVE-2026-124178 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-124179 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-124183 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-124210 | Normal | 6.5 | Important | Information Disclosure | SharePoint owners | Microsoft | Microsoft Office SharePoint Information Disclosure Vulnerability |
| CVE-2026-124233 | Normal | 6.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-67382 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68783 | Normal | 6.5 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-96082 | Normal | 6.5 | Important | Denial of Service | Identity / AD | Microsoft | Windows Kerberos Denial of Service Vulnerability |
| CVE-2026-120783 | Normal | 6.4 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure DevOps Server Elevation of Privilege Vulnerability |
| CVE-2026-100223 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-105022 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105025 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-105028 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-105503 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-105505 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
| CVE-2026-105507 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-105528 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-105532 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-105541 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-105543 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-105569 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-105575 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-105580 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Management Instrumentation Remote Code Execution Vulnerability |
| CVE-2026-108403 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-108405 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-108407 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2026-108412 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
| CVE-2026-110049 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-110056 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-111302 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-112743 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-112751 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Assistance Elevation of Privilege Vulnerability |
| CVE-2026-112752 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112758 | Normal | 7.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Windows Defender Firewall Service Elevation of Privilege Vulnerability |
| CVE-2026-112760 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-112794 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-112799 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2026-112801 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows eSCL Scanner Elevation of Privilege Vulnerability |
| CVE-2026-112802 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-112978 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112981 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-113748 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
| CVE-2026-113758 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-113759 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-113765 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2026-113767 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-113843 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-113847 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-113848 | Normal | 7.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-114161 | Normal | 7.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2026-114165 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-114167 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-114170 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-118126 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-118137 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows FTP Service Elevation of Privilege Vulnerability |
| CVE-2026-118138 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-118142 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-118215 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118220 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Multiple Provider Router Elevation of Privilege Vulnerability |
| CVE-2026-118222 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118223 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118224 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118280 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-118723 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-119390 | Normal | 7.8 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-119391 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-119393 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential Manager Elevation of Privilege Vulnerability |
| CVE-2026-119816 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
| CVE-2026-119817 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-119821 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2026-119826 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-119834 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-119846 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-119847 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-119899 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-119904 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Speech Elevation of Privilege Vulnerability |
| CVE-2026-119907 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability |
| CVE-2026-119917 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
| CVE-2026-119929 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119933 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-119939 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-119941 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Volume Shadow Copy Elevation of Privilege Vulnerability |
| CVE-2026-119943 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-119953 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-119954 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-119987 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows App Store Elevation of Privilege Vulnerability |
| CVE-2026-119997 | Normal | 7.8 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-120782 | Normal | 7.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-121661 | Normal | 7.8 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-121673 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Filter Manager Elevation of Privilege Vulnerability |
| CVE-2026-121681 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Trace Data Helper Elevation of Privilege Vulnerability |
| CVE-2026-122165 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-122166 | Normal | 7.8 | Important | Elevation of Privilege | Remote access / RDP | Microsoft | Windows Remote Desktop Services Elevation of Privilege Vulnerability |
| CVE-2026-122168 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-122172 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Trace Data Helper Elevation of Privilege Vulnerability |
| CVE-2026-122183 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-122984 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-123388 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
| CVE-2026-124225 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows PowerShell Remote Code Execution Vulnerability |
| CVE-2026-70182 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-85801 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-85929 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-85942 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-88213 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| CVE-2026-88227 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-88232 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-88233 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-88239 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-88241 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-88245 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-94507 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | DirectX Elevation of Privilege Vulnerability |
| CVE-2026-94515 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-94527 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2026-94531 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM Elevation of Privilege Vulnerability |
| CVE-2026-95872 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-95877 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-95879 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95881 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-95891 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-95894 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-95895 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95896 | Normal | 7.8 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-95898 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows iSCSI Elevation of Privilege Vulnerability |
| CVE-2026-95902 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Hub Driver Elevation of Privilege Vulnerability |
| CVE-2026-95909 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95920 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-95932 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95933 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-95934 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
| CVE-2026-95942 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95947 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-95948 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95951 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-95953 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95965 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-95991 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95997 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Event Logging Service Elevation of Privilege Vulnerability |
| CVE-2026-95999 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Hub Driver Elevation of Privilege Vulnerability |
| CVE-2026-96005 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-96016 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-96023 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Push Notification Core Elevation of Privilege Vulnerability |
| CVE-2026-96028 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96029 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96031 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96036 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96037 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows User Manager Service Elevation of Privilege Vulnerability |
| CVE-2026-96038 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-96052 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96053 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-96055 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-96056 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-96057 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-96060 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96062 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96066 | Normal | 7.8 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-96074 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Package Manager Elevation of Privilege Vulnerability |
| CVE-2026-96076 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DIAL Client Elevation of Privilege Vulnerability |
| CVE-2026-96084 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Graphic Fonts Elevation of Privilege Vulnerability |
| CVE-2026-96085 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96102 | Normal | 7.8 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-96103 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96117 | Normal | 7.8 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-96122 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96127 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Biometric Service Elevation of Privilege Vulnerability |
| CVE-2026-96129 | Normal | 7.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96152 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96160 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96162 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability |
| CVE-2026-96172 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96174 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96175 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96184 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-96845 | Normal | 7.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-109485 | Normal | 6.3 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft 365 Agents SDK Information Disclosure Vulnerability |
| CVE-2026-109476 | Normal | 6.1 | Important | Information Disclosure | Other / general Windows | Microsoft | ASP.NET Core Information Disclosure Vulnerability |
| CVE-2026-121669 | Normal | 6.1 | Important | Information Disclosure | Other / general Windows | Microsoft | PowerShell Information Disclosure Vulnerability |
| CVE-2026-121674 | Normal | 6.1 | Important | Information Disclosure | Other / general Windows | Microsoft | PowerShell Information Disclosure Vulnerability |
| CVE-2026-121675 | Normal | 6.1 | Important | Information Disclosure | Other / general Windows | Microsoft | PowerShell Information Disclosure Vulnerability |
| CVE-2026-122985 | Normal | 6.1 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft PowerShell Information Disclosure Vulnerability |
| CVE-2026-105544 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-113855 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows DNS Remote Code Execution Vulnerability |
| CVE-2026-114155 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | .NET Elevation of Privilege Vulnerability |
| CVE-2026-114157 | Normal | 7.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2026-116706 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
| CVE-2026-122169 | Normal | 7.5 | Important | Spoofing | Other / general Windows | Microsoft | Windows IKE Extension Spoofing Vulnerability |
| CVE-2026-88212 | Normal | 7.5 | Important | Remote Code Execution | Network / infra servers | Microsoft | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
| CVE-2026-88244 | Normal | 7.5 | Important | Remote Code Execution | Other / general Windows | Microsoft | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
| CVE-2026-97002 | Normal | 7.5 | Important | Elevation of Privilege | Virtualization / Hyper-V | Microsoft | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
| CVE-2026-69327 | Normal | 7.4 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-119900 | Normal | 7.3 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-120778 | Normal | 7.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Aspire Elevation of Privilege Vulnerability |
| CVE-2026-120792 | Normal | 7.3 | Important | Information Disclosure | Other / general Windows | Microsoft | Aspire Information Disclosure Vulnerability |
| CVE-2026-122518 | Normal | 6.5 | Moderate | Information Disclosure | Browser (Edge auto-update) | Microsoft | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2026-116939 | Normal | 5.7 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-88211 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Graphic Fonts Information Disclosure Vulnerability |
| CVE-2026-88231 | Normal | 5.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows iSCSI Information Disclosure Vulnerability |
| CVE-2026-112973 | Normal | 7.1 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows Kernel Security Feature Bypass Vulnerability |
| CVE-2026-122986 | Normal | 7.8 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability |
| CVE-2026-100204 | Normal | 7.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | HEIF Image Extensions Remote Code Execution Vulnerability |
| CVE-2026-103571 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
| CVE-2026-105017 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Volume Shadow Copy Elevation of Privilege Vulnerability |
| CVE-2026-105024 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-105504 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-105509 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-105510 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
| CVE-2026-105511 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
| CVE-2026-105513 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-105522 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winlogon Elevation of Privilege Vulnerability |
| CVE-2026-105525 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2026-105526 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winsock Elevation of Privilege Vulnerability |
| CVE-2026-105529 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-105533 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM Elevation of Privilege Vulnerability |
| CVE-2026-105540 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-105545 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-105546 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-105547 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup and Deployment Elevation of Privilege Vulnerability |
| CVE-2026-105553 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
| CVE-2026-105554 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
| CVE-2026-105565 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-105566 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-105567 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-105574 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-105582 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-105583 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-105586 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
| CVE-2026-105587 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows OLE DB Elevation of Privilege Vulnerability |
| CVE-2026-105589 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Wireless Networking Elevation of Privilege Vulnerability |
| CVE-2026-108406 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2026-108413 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-108414 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Projected File System Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-112753 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-112756 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
| CVE-2026-112761 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-112763 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-112764 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-112765 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112766 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-112790 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-112792 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112796 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Event Collector Service Elevation of Privilege Vulnerability |
| CVE-2026-112797 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112800 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
| CVE-2026-112804 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-112810 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-112812 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-112968 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM Elevation of Privilege Vulnerability |
| CVE-2026-112971 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-112976 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-112986 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-112987 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-112989 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-113750 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Inventory Elevation of Privilege Vulnerability |
| CVE-2026-113751 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Fast FAT Driver Elevation of Privilege Vulnerability |
| CVE-2026-113755 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Filter Manager Elevation of Privilege Vulnerability |
| CVE-2026-113761 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-113762 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-113769 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-113770 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-113820 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-113842 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Security Center Elevation of Privilege Vulnerability |
| CVE-2026-116707 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability |
| CVE-2026-118116 | Normal | 7.0 | Important | Elevation of Privilege | Database / SQL | Microsoft | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-118123 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
| CVE-2026-118124 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-118125 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-118288 | Normal | 7.0 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
| CVE-2026-119386 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-119387 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
| CVE-2026-119388 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
| CVE-2026-119397 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
| CVE-2026-119399 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119401 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-119402 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-119403 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-119405 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-119822 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-119827 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-119831 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119833 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Message Queuing Elevation of Privilege Vulnerability |
| CVE-2026-119835 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-119844 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-119849 | Normal | 7.0 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
| CVE-2026-119851 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-119859 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-119860 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-119861 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-119865 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119866 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-119868 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-119870 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows SMB Client Elevation of Privilege Vulnerability |
| CVE-2026-119873 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-119874 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-119876 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Scanner Driver Elevation of Privilege Vulnerability |
| CVE-2026-119888 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-119893 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-119894 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-119895 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-119898 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
| CVE-2026-119913 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-119919 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
| CVE-2026-119921 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
| CVE-2026-119928 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
| CVE-2026-119931 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Text Services Framework Elevation of Privilege Vulnerability |
| CVE-2026-119974 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-119981 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Visual Studio Code Elevation of Privilege Vulnerability |
| CVE-2026-121670 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-121671 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-122170 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-122174 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2026-122179 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
| CVE-2026-122182 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Maps Elevation of Privilege Vulnerability |
| CVE-2026-123389 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
| CVE-2026-124224 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | PowerShell Elevation of Privilege Vulnerability |
| CVE-2026-69565 | Normal | 7.0 | Important | Remote Code Execution | Remote access / RDP | Microsoft | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-70120 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-70231 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-83894 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | RPC Runtime Elevation of Privilege Vulnerability |
| CVE-2026-85862 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-88221 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88224 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-88228 | Normal | 7.0 | Important | Elevation of Privilege | Identity / AD | Microsoft | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability |
| CVE-2026-88237 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-94519 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-94522 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
| CVE-2026-94525 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-94529 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-95871 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-95876 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
| CVE-2026-95888 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95906 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95922 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95923 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2026-95938 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95950 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95961 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-95966 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95968 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-95971 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95973 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95974 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-95976 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
| CVE-2026-95979 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-95987 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows User Manager Service Elevation of Privilege Vulnerability |
| CVE-2026-96004 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96007 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-96008 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96019 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96026 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96027 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96035 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96042 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connection Manager Service Elevation of Privilege Vulnerability |
| CVE-2026-96043 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connection Manager Service Elevation of Privilege Vulnerability |
| CVE-2026-96046 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96047 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96051 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-96054 | Normal | 7.0 | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Color Management Remote Code Execution Vulnerability |
| CVE-2026-96061 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96072 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-96073 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96075 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Feedback Hub Elevation of Privilege Vulnerability |
| CVE-2026-96088 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
| CVE-2026-96097 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Brokering File System Elevation of Privilege Vulnerability |
| CVE-2026-96107 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Phone Service Elevation of Privilege Vulnerability |
| CVE-2026-96124 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96139 | Normal | 7.0 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-96153 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-96155 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-96158 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability |
| CVE-2026-96168 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96171 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96969 | Normal | 7.0 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-96971 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-96973 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-96978 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Credential User Interface Elevation of Privilege Vulnerability |
| CVE-2026-96994 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Winsock Elevation of Privilege Vulnerability |
| CVE-2026-97000 | Normal | 7.0 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows USM Communication Manager Elevation of Privilege Vulnerability |
| CVE-2026-108404 | Normal | 6.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows CD-ROM Driver Remote Code Execution Vulnerability |
| CVE-2026-108415 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2026-108416 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2026-112755 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows RNDIS Elevation of Privilege Vulnerability |
| CVE-2026-118143 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-119823 | Normal | 6.8 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Storport Miniport Driver Remote Code Execution Vulnerability |
| CVE-2026-119829 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
| CVE-2026-119830 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-119884 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-119885 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-119918 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-119935 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-122167 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-122173 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-125135 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-95905 | Normal | 6.8 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96974 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-96979 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-96982 | Normal | 6.8 | Important | Elevation of Privilege | Other / general Windows | Microsoft | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-97015 | Normal | 6.8 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows BitLocker Security Feature Bypass Vulnerability |
| CVE-2026-105492 | Normal | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | Microsoft Remote Registry Service Denial of Service Vulnerability |
| CVE-2026-112736 | Normal | 5.3 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-113756 | Normal | 5.3 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows FileCrypt Driver Security Feature Bypass Vulnerability |
| CVE-2026-119848 | Normal | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Message Queuing Denial of Service Vulnerability |
| CVE-2026-119867 | Normal | 5.3 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Windows Installer Security Feature Bypass Vulnerability |
| CVE-2026-119882 | Normal | 5.3 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Services Information Disclosure Vulnerability |
| CVE-2026-119890 | Normal | 5.3 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-121678 | Normal | 5.3 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-95884 | Normal | 5.3 | Important | Information Disclosure | Identity / AD | Microsoft | Windows Active Directory Certificate Services Information Disclosure Vulnerability |
| CVE-2026-112980 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-119852 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-119912 | Normal | 6.7 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-119914 | Normal | 6.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Setup and Deployment Elevation of Privilege Vulnerability |
| CVE-2026-95910 | Normal | 6.7 | Important | Security Feature Bypass | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Security Feature Bypass Vulnerability |
| CVE-2026-96179 | Normal | 6.7 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DNS Elevation of Privilege Vulnerability |
| CVE-2026-105018 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-112969 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-112984 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-113817 | Normal | 6.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Devices Human Interface Elevation of Privilege Vulnerability |
| CVE-2026-116700 | Normal | 6.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Telephony Service Elevation of Privilege Vulnerability |
| CVE-2026-118144 | Normal | 6.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-119383 | Normal | 6.6 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-119394 | Normal | 6.6 | Important | Remote Code Execution | Endpoints / Windows client | Microsoft | Windows Enhanced Storage Remote Code Execution Vulnerability |
| CVE-2026-119937 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-124229 | Normal | 6.6 | Important | Remote Code Execution | Office / productivity | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-95889 | Normal | 6.6 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-118214 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Advanced Rasterization Platform Information Disclosure Vulnerability |
| CVE-2026-118739 | Normal | 6.5 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DHCP Client Denial of Service Vulnerability |
| CVE-2026-119396 | Normal | 6.5 | Important | Tampering | Other / general Windows | Microsoft | Windows Remote Access API Tampering Vulnerability |
| CVE-2026-96018 | Normal | 6.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows AppContainer Information Disclosure Vulnerability |
| CVE-2026-96086 | Normal | 6.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows WLAN Service Denial of Service Vulnerability |
| CVE-2026-105588 | Normal | 6.4 | Important | Elevation of Privilege | Network / infra servers | Microsoft | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-119869 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Failover Cluster Elevation of Privilege Vulnerability |
| CVE-2026-119871 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows IP Translation Configuration Service Elevation of Privilege Vulnerability |
| CVE-2026-119872 | Normal | 6.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-119901 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-119965 | Normal | 6.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88215 | Normal | 6.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
| CVE-2026-96981 | Normal | 6.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
| CVE-2026-96992 | Normal | 6.4 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
| CVE-2026-116940 | Normal | 4.9 | Important | Information Disclosure | Database / SQL | Microsoft | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-119905 | Normal | 4.9 | Important | Spoofing | Network / infra servers | Microsoft | Windows DNS Spoofing Vulnerability |
| CVE-2026-119970 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-119971 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Server Information Disclosure Vulnerability |
| CVE-2026-96017 | Normal | 4.9 | Important | Denial of Service | Network / infra servers | Microsoft | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-96970 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96976 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96980 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96984 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96985 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96986 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96987 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-96988 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-97006 | Normal | 4.9 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Information Disclosure Vulnerability |
| CVE-2026-113763 | Normal | 6.3 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability |
| CVE-2026-119840 | Normal | 6.3 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-105734 | Normal | 7.0 | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure Local Elevation of Privilege Vulnerability |
| CVE-2026-109456 | Normal | 4.6 | Important | Spoofing | SharePoint owners | Microsoft | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-112757 | Normal | 6.0 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Secure Kernel Mode Information Disclosure Vulnerability |
| CVE-2026-119955 | Normal | 6.0 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-119832 | Normal | 5.9 | Important | Security Feature Bypass | Endpoints / Windows client | Microsoft | Windows BitLocker Security Feature Bypass Vulnerability |
| CVE-2026-123395 | Normal | 5.9 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-96022 | Normal | 5.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Text Services Framework Information Disclosure Vulnerability |
| CVE-2026-96150 | Normal | 5.6 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
| CVE-2026-102868 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Shell Information Disclosure Vulnerability |
| CVE-2026-105527 | Normal | 5.5 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Encrypting File System (EFS) Denial of Service Vulnerability |
| CVE-2026-105530 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows System Events Broker Information Disclosure Vulnerability |
| CVE-2026-105531 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-105537 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Mailslot File System Information Disclosure Vulnerability |
| CVE-2026-105552 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-105584 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Inventory Backup Information Disclosure Vulnerability |
| CVE-2026-108408 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Telephony Service Information Disclosure Vulnerability |
| CVE-2026-108409 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-108410 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-109460 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Microsoft Entra Private Network Connector Information Disclosure Vulnerability |
| CVE-2026-112720 | Normal | 5.5 | Important | Information Disclosure | Office / productivity | Microsoft | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-112750 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2026-112754 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Graphics Component Information Disclosure Vulnerability |
| CVE-2026-112803 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
| CVE-2026-112809 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Composite Image File System Information Disclosure Vulnerability |
| CVE-2026-112814 | Normal | 5.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-112965 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Instrumentation Information Disclosure Vulnerability |
| CVE-2026-112974 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft Account Tampering Vulnerability |
| CVE-2026-112977 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Deployment Services Information Disclosure Vulnerability |
| CVE-2026-112979 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows State Repository Service Tampering Vulnerability |
| CVE-2026-112982 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Microsoft Account Tampering Vulnerability |
| CVE-2026-112988 | Normal | 5.5 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-113757 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows FileCrypt Driver Information Disclosure Vulnerability |
| CVE-2026-113771 | Normal | 5.5 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability |
| CVE-2026-113844 | Normal | 5.5 | Important | Tampering | Endpoints / Windows client | Microsoft | Windows NTFS Tampering Vulnerability |
| CVE-2026-114166 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Raw Image Extension Information Disclosure Vulnerability |
| CVE-2026-118140 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Server for NFS Information Disclosure Vulnerability |
| CVE-2026-118736 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows Network File System Information Disclosure Vulnerability |
| CVE-2026-119825 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-119855 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows COM+ Event System Service Information Disclosure Vulnerability |
| CVE-2026-119856 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-119857 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-122162 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Update Stack Information Disclosure Vulnerability |
| CVE-2026-122297 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Transaction Manager Information Disclosure Vulnerability |
| CVE-2026-83953 | Normal | 5.5 | Important | Information Disclosure | Cloud / M365 apps | Microsoft | GitHub Copilot for Jetbrains Information Disclosure Vulnerability |
| CVE-2026-84004 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | AMD Zen Information Disclosure Vulnerability |
| CVE-2026-84005 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | AMD Zen Information Disclosure Vulnerability |
| CVE-2026-88217 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-88220 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Performance Counters Information Disclosure Vulnerability |
| CVE-2026-88247 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability |
| CVE-2026-94517 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Transaction Manager Information Disclosure Vulnerability |
| CVE-2026-95893 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-95908 | Normal | 5.5 | Important | Information Disclosure | Remote access / RDP | Microsoft | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-95944 | Normal | 5.5 | Important | Tampering | Other / general Windows | Microsoft | Windows App Readiness Service Tampering Vulnerability |
| CVE-2026-95946 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-95977 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Event Viewer Information Disclosure Vulnerability |
| CVE-2026-96001 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Bluetooth Service Information Disclosure Vulnerability |
| CVE-2026-96041 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows USB Hub Driver Information Disclosure Vulnerability |
| CVE-2026-96059 | Normal | 5.5 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | HID class driver Information Disclosure Vulnerability |
| CVE-2026-96101 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability |
| CVE-2026-96110 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows OLE Information Disclosure Vulnerability |
| CVE-2026-96112 | Normal | 5.5 | Important | Information Disclosure | Network / infra servers | Microsoft | Windows DNS Server Information Disclosure Vulnerability |
| CVE-2026-96133 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-96137 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-96156 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Broker Infrastructure Service Information Disclosure Vulnerability |
| CVE-2026-96989 | Normal | 5.5 | Important | Information Disclosure | Other / general Windows | Microsoft | Secondary Logon Information Disclosure Vulnerability |
| CVE-2026-108402 | Normal | 5.3 | Important | Denial of Service | Network / infra servers | Microsoft | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
| CVE-2026-112975 | Normal | 5.3 | Important | Denial of Service | Other / general Windows | Microsoft | Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability |
| CVE-2026-119959 | Normal | 5.3 | Important | Spoofing | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Spoofing Vulnerability |
| CVE-2026-96965 | Normal | 5.3 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-96983 | Normal | 5.3 | Important | Denial of Service | Network / infra servers | Microsoft | Windows DNS Denial of Service Vulnerability |
| CVE-2026-105506 | Normal | 5.0 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Shell Information Disclosure Vulnerability |
| CVE-2026-102200 | Normal | 4.7 | Important | Tampering | Endpoints / Windows client | Microsoft | Windows NTFS Tampering Vulnerability |
| CVE-2026-105562 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Container Manager Service Information Disclosure Vulnerability |
| CVE-2026-108423 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows WinHTTP Information Disclosure Vulnerability |
| CVE-2026-112789 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-112806 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-112813 | Normal | 4.7 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-112990 | Normal | 4.7 | Important | Elevation of Privilege | Endpoints / Windows client | Microsoft | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-113754 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows FileCrypt Driver Information Disclosure Vulnerability |
| CVE-2026-113764 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Projected File System Information Disclosure Vulnerability |
| CVE-2026-113772 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Redirected Drive Buffering Information Disclosure Vulnerability |
| CVE-2026-113815 | Normal | 4.7 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Microsoft PowerShell Security Feature Bypass Vulnerability |
| CVE-2026-119385 | Normal | 4.7 | Important | Denial of Service | Virtualization / Hyper-V | Microsoft | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2026-119836 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Management Services Information Disclosure Vulnerability |
| CVE-2026-119838 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Installer Information Disclosure Vulnerability |
| CVE-2026-119841 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-119910 | Normal | 4.7 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Win32k Information Disclosure Vulnerability |
| CVE-2026-119942 | Normal | 4.7 | Important | Information Disclosure | Network / infra servers | Microsoft | HTTP.sys Information Disclosure Vulnerability |
| CVE-2026-96048 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-96093 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Internet (wininet.dll) Information Disclosure Vulnerability |
| CVE-2026-96144 | Normal | 4.7 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Graphics Kernel Information Disclosure Vulnerability |
| CVE-2026-96058 | Normal | 4.6 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Kernel Information Disclosure Vulnerability |
| CVE-2026-109462 | Normal | 4.4 | Important | Security Feature Bypass | Cloud / M365 apps | Microsoft | Azure Firmware Security Feature Bypass Vulnerability |
| CVE-2026-85907 | Normal | 4.4 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
| CVE-2026-95998 | Normal | 4.4 | Important | Tampering | Other / general Windows | Microsoft | Windows StateRepository API Tampering Vulnerability |
| CVE-2026-105549 | Normal | 4.3 | Important | Information Disclosure | Other / general Windows | Microsoft | Windows Smart Card Information Disclosure Vulnerability |
| CVE-2026-113816 | Normal | 4.1 | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
| CVE-2026-113821 | Normal | 4.1 | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
| CVE-2026-119395 | Normal | 4.0 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Storport.sys Driver Information Disclosure Vulnerability |
| CVE-2026-119875 | Normal | 4.0 | Important | Information Disclosure | Endpoints / Windows client | Microsoft | Windows Storport Miniport Driver Information Disclosure Vulnerability |
| CVE-2026-120640 | Normal worm | 9.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields |
| CVE-2026-120641 | Normal worm | 9.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths |
| CVE-2026-121133 | Normal worm | 8.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121133: Incorrect reference resolution |
| CVE-2026-121224 | Normal worm | 8.1 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121224: Security issue |
| CVE-2026-113766 | Normal | 3.3 | Important | Tampering | Other / general Windows | Microsoft | Windows Language Experience Service Tampering Vulnerability |
| CVE-2026-119883 | Normal | 3.3 | Important | Security Feature Bypass | Other / general Windows | Microsoft | Data Deduplication Security Feature Bypass Vulnerability |
| CVE-2026-118309 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-118309: Incorrect reference resolution |
| CVE-2026-118321 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-118321: Use after free |
| CVE-2026-119261 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119261: Improper input validation |
| CVE-2026-119263 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119263: Memory corruption |
| CVE-2026-121030 | Normal | 9.6 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121030: Incorrect authorization |
| CVE-2026-121034 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121034: Use after free |
| CVE-2026-121037 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121037: Out of bounds write |
| CVE-2026-121086 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121086: Buffer overflow |
| CVE-2026-121089 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121089: Use after free |
| CVE-2026-121104 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121104: Incorrect authorization |
| CVE-2026-121114 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121114: Use after free |
| CVE-2026-121131 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121131: Use after free |
| CVE-2026-121185 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121185: Use after free |
| CVE-2026-121189 | Normal | 9.6 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121189: Use after free |
| CVE-2026-121200 | Normal | 9.6 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121200: Incorrect reference resolution |
| CVE-2026-121202 | Normal | 9.6 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121202: Use after free |
| CVE-2026-121214 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121214: Use after free |
| CVE-2026-121249 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121249: Buffer overflow |
| CVE-2026-121250 | Normal | 9.6 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121250: Use after free |
| CVE-2026-121257 | Normal | 9.6 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121257: Use after free |
| CVE-2026-99246 | Normal worm | 8.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | tipc: protect node reset trace dump with node lock |
| CVE-2026-99270 | Normal worm | 8.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | tcp: Fix potential UAF in reqsk_timer_handler(). |
| CVE-2026-119741 | Normal worm | 7.5 | Important | Denial of Service | Linux / third-party (patch via OS vendor) | Linux / other | rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions |
| CVE-2026-120632 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type |
| CVE-2026-120644 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values |
| CVE-2026-120645 | Normal worm | 7.5 | Moderate | Denial of Service | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list |
| CVE-2026-120647 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename |
| CVE-2026-120648 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment |
| CVE-2026-120650 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits |
| CVE-2026-120651 | Normal worm | 7.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set |
| CVE-2026-121996 | Normal worm | 8.2 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length |
| CVE-2026-121997 | Normal worm | 8.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch |
| CVE-2026-118314 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-118314: Incorrect reference resolution |
| CVE-2026-119260 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119260: Use after free |
| CVE-2026-119262 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119262: Improper input validation |
| CVE-2026-119264 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119264: Memory corruption |
| CVE-2026-119265 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119265: Memory corruption |
| CVE-2026-119266 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119266: Use after free |
| CVE-2026-119267 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119267: Memory corruption |
| CVE-2026-119268 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119268: Integer overflow |
| CVE-2026-119269 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119269: Use after free |
| CVE-2026-119270 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119270: Improper input validation |
| CVE-2026-119271 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119271: Use after free |
| CVE-2026-121036 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121036: Use after free |
| CVE-2026-121050 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121050: Race condition |
| CVE-2026-121078 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121078: Type confusion |
| CVE-2026-121079 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121079: Race condition |
| CVE-2026-121082 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121082: Type confusion |
| CVE-2026-121083 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121083: Use after free |
| CVE-2026-121087 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121087: Improper input validation |
| CVE-2026-121092 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121092: Uncontrolled recursion |
| CVE-2026-121094 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121094: Type confusion |
| CVE-2026-121097 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121097: Use after free |
| CVE-2026-121100 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121100: Use after free |
| CVE-2026-121102 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121102: Missing authorization |
| CVE-2026-121107 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121107: Incorrect authorization |
| CVE-2026-121108 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121108: Confused deputy |
| CVE-2026-121113 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121113: Buffer overflow |
| CVE-2026-121117 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121117: Use after free |
| CVE-2026-121118 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121118: Use after free |
| CVE-2026-121119 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121119: Use after free |
| CVE-2026-121120 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121120: Improper input validation |
| CVE-2026-121123 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121123: Use after free |
| CVE-2026-121124 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121124: Improper adherence to coding standards |
| CVE-2026-121127 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121127: Use after free |
| CVE-2026-121128 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121128: Use after free |
| CVE-2026-121129 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121129: Use after free |
| CVE-2026-121134 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121134: Information loss |
| CVE-2026-121135 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121135: Security issue |
| CVE-2026-121137 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121137: Type confusion |
| CVE-2026-121174 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121174: Missing authorization |
| CVE-2026-121179 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121179: Use after free |
| CVE-2026-121180 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121180: Buffer overflow |
| CVE-2026-121181 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121181: Use after free |
| CVE-2026-121182 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121182: Use after free |
| CVE-2026-121184 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121184: Out of bounds read |
| CVE-2026-121188 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121188: Use after free |
| CVE-2026-121195 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121195: Incorrect authorization |
| CVE-2026-121198 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121198: Confused deputy |
| CVE-2026-121201 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121201: Use after free |
| CVE-2026-121204 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121204: Incomplete cleanup |
| CVE-2026-121205 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121205: Incorrect authorization |
| CVE-2026-121208 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121208: Out of bounds read |
| CVE-2026-121210 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121210: Type confusion |
| CVE-2026-121212 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121212: Incorrect authorization |
| CVE-2026-121218 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121218: Type confusion |
| CVE-2026-121221 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121221: Type confusion |
| CVE-2026-121222 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121222: Incorrect authorization |
| CVE-2026-121226 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121226: Type confusion |
| CVE-2026-121228 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121228: Type confusion |
| CVE-2026-121233 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121233: Type confusion |
| CVE-2026-121236 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121236: Improper input validation |
| CVE-2026-121238 | Normal | 8.8 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121238: Use after free |
| CVE-2026-121251 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121251: Missing authorization |
| CVE-2026-121252 | Normal | 8.8 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121252: Incorrect authorization |
| CVE-2026-76025 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76025: Use after free |
| CVE-2026-76026 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76026: Memory corruption |
| CVE-2026-76028 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76028: Use after free |
| CVE-2026-76029 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76029: Memory corruption |
| CVE-2026-76030 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76030: Memory corruption |
| CVE-2026-76031 | Normal | 8.8 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76031: Use after free |
| CVE-2026-124586 | Normal worm | 7.3 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Tencent RapidJSON diyfp.h GetCachedPowerByIndex out-of-bounds |
| CVE-2026-121084 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121084: Out of bounds read |
| CVE-2026-121098 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121098: Improper state validation |
| CVE-2026-121178 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121178: Use after free |
| CVE-2026-121183 | Normal | 8.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121183: Incorrect authorization |
| CVE-2026-121211 | Normal | 8.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121211: Use after free |
| CVE-2026-121219 | Normal | 8.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121219: Integer overflow |
| CVE-2026-121230 | Normal | 8.3 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121230: Race condition |
| CVE-2026-121256 | Normal | 8.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121256: Use of released resource |
| CVE-2026-123151 | Normal worm | 7.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail |
| CVE-2026-123570 | Normal worm | 7.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts |
| CVE-2026-123576 | Normal worm | 7.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests |
| CVE-2026-123577 | Normal worm | 7.5 | Important | Denial of Service | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service |
| CVE-2026-123608 | Normal worm | 7.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression |
| CVE-2026-116592 | Normal worm | 7.4 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops |
| CVE-2026-121081 | Normal worm | 5.9 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121081: UI misrepresentation |
| CVE-2026-82413 | Normal | 8.8 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`) |
| CVE-2026-120633 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port |
| CVE-2026-120635 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs |
| CVE-2026-120636 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form |
| CVE-2026-120638 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect |
| CVE-2026-120639 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push |
| CVE-2026-120642 | Normal worm | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | CGI versions before 5.00 for Perl return request-derived values untainted under taint mode |
| CVE-2026-121994 | Normal | 8.8 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length |
| CVE-2026-123596 | Normal | 8.8 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC |
| CVE-2026-123605 | Normal | 8.8 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name |
| CVE-2026-97371 | Normal worm | 5.3 | Moderate | Remote Code Execution | Linux / third-party (patch via OS vendor) | Linux / other | ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets |
| CVE-2026-105494 | Normal | — | Important | Elevation of Privilege | Cloud / M365 apps | Microsoft | Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability |
| CVE-2026-108470 | Normal | — | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability |
| CVE-2026-109492 | Normal | — | Important | Elevation of Privilege | Other / general Windows | Microsoft | Microsoft MCP Gateway Elevation of Privilege Vulnerability |
| CVE-2026-119906 | Normal | — | Important | Elevation of Privilege | Other / general Windows | Microsoft | Windows Sandbox Elevation of Privilege Vulnerability |
| CVE-2026-120006 | Normal | — | Important | Elevation of Privilege | Other / general Windows | Microsoft | Aspire Elevation of Privilege Vulnerability |
| CVE-2026-121668 | Normal | — | Important | Tampering | Cloud / M365 apps | Microsoft | Azure Confidential Clean Rooms Tampering Vulnerability |
| CVE-2026-62903 | Normal | — | Important | Information Disclosure | Other / general Windows | Microsoft | Microsoft.Data.SqlClient Information Disclosure Vulnerability |
| CVE-2026-66801 | Normal | — | Important | Remote Code Execution | Other / general Windows | Microsoft | Microsoft Xbox Remote Code Execution Vulnerability |
| CVE-2026-121038 | Normal | 6.5 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121038: Information leak |
| CVE-2026-121088 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121088: Missing authorization |
| CVE-2026-121099 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121099: Information leak |
| CVE-2026-121105 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121105: Information leak |
| CVE-2026-121132 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121132: Information leak |
| CVE-2026-121138 | Normal | 6.5 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121138: Observable discrepancy |
| CVE-2026-121176 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121176: Uninitialized resource |
| CVE-2026-121213 | Normal | 6.5 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121213: Uninitialized resource |
| CVE-2026-121235 | Normal | 6.5 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121235: Information leak |
| CVE-2026-121239 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121239: Information leak |
| CVE-2026-121243 | Normal | 6.5 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121243: Information leak |
| CVE-2026-121254 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121254: Information leak |
| CVE-2026-121255 | Normal | 6.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121255: Incorrect authorization |
| CVE-2026-124317 | Normal worm | 4.8 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16 |
| CVE-2026-105590 | Normal | 5.3 | Important | Security Feature Bypass | Linux / third-party (patch via OS vendor) | Linux / other | Windows Active Directory Certificate Services Security Feature Bypass |
| CVE-2026-121217 | Normal | 7.5 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121217: Use after free |
| CVE-2026-121995 | Normal | 7.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail |
| CVE-2026-114456 | Normal | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers |
| CVE-2026-115715 | Normal | 6.5 | Moderate | Denial of Service | Linux / third-party (patch via OS vendor) | Linux / other | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service |
| CVE-2026-99272 | Normal | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | smb: client: validate the data area in SMB2_read() |
| CVE-2026-99273 | Normal | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | ksmbd: reserve space for the UTF-16 terminator in stream info |
| CVE-2026-99274 | Normal | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | smb: client: fix fiemap wild read on empty truncated response |
| CVE-2026-99275 | Normal | 6.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | smb: client: reject short SESSION_SETUP responses |
| CVE-2026-120930 | Normal | 5.4 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-120930: Incorrect authorization |
| CVE-2026-121121 | Normal | 5.4 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121121: UI misrepresentation |
| CVE-2026-121122 | Normal | 5.4 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121122: UI misrepresentation |
| CVE-2026-121206 | Normal | 5.4 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121206: UI misrepresentation |
| CVE-2026-121215 | Normal | 5.4 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121215: UI misrepresentation |
| CVE-2026-121216 | Normal | 5.4 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121216: UI misrepresentation |
| CVE-2026-121244 | Normal | 5.4 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121244: UI misrepresentation |
| CVE-2026-121091 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121091: Incorrect authorization |
| CVE-2026-121125 | Normal | 5.3 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121125: Information leak |
| CVE-2026-121130 | Normal | 5.3 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121130: Observable discrepancy |
| CVE-2026-121187 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121187: Observable discrepancy |
| CVE-2026-121194 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121194: Missing authorization |
| CVE-2026-121245 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121245: Race condition |
| CVE-2026-99283 | Normal worm | 3.7 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets |
| CVE-2026-120830 | Normal | 7.4 | Moderate | Information Disclosure | Linux / third-party (patch via OS vendor) | Linux / other | Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure |
| CVE-2026-123532 | Normal | 6.5 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe |
| CVE-2026-120757 | Normal | 7.1 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse |
| CVE-2026-99281 | Normal | 7.1 | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | tun: Require CAP_NET_ADMIN to attach to an ownerless device |
| CVE-2026-123611 | Normal worm | 3.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello |
| CVE-2026-119272 | Normal | 4.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-119272: Out of bounds read |
| CVE-2026-121080 | Normal | 4.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121080: Use after free |
| CVE-2026-76027 | Normal | 4.3 | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-76027: Memory corruption |
| CVE-2026-120831 | Normal | 6.5 | Moderate | Denial of Service | Linux / third-party (patch via OS vendor) | Linux / other | Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service |
| CVE-2026-121199 | Normal | 5.5 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121199: Missing authorization |
| CVE-2026-120756 | Normal | 6.1 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize |
| CVE-2026-121039 | Normal | 5.3 | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121039: Incorrect authorization |
| CVE-2026-100081 | Normal | 6.0 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | xen-netback: defer xenvif_mcast_addr_list_free() |
| CVE-2026-121232 | Normal | 5.1 | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121232: Incorrect authorization |
| CVE-2026-115298 | Normal | 4.3 | Moderate | Information Disclosure | Linux / third-party (patch via OS vendor) | Linux / other | Incorrect Authorization in Elasticsearch Leading to Information Disclosure |
| CVE-2026-115710 | Normal | 4.2 | Moderate | Information Disclosure | Linux / third-party (patch via OS vendor) | Linux / other | Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure |
| CVE-2026-100080 | Normal | 5.6 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | xen-netback: Fix UAF when reading statistics data |
| CVE-2026-120454 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression |
| CVE-2026-120755 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter |
| CVE-2026-120758 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | NULL Pointer Dereference in H5HL_unprotect via Corrupted File |
| CVE-2026-99220 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | asymmetric_keys: reject trust keys without IDs |
| CVE-2026-99229 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring/wait: don't spin on a stuck overflow list |
| CVE-2026-99236 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | tracing: Reject incomplete event filter expressions |
| CVE-2026-99254 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring: don't flood a cancelling task with task_work |
| CVE-2026-99271 | Normal | 5.5 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | ALSA: line6: Clear prev_fbuf on capture buffer release |
| CVE-2026-112910 | Normal | 5.3 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL |
| CVE-2026-120457 | Normal | 5.3 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder |
| CVE-2026-99224 | Normal | 5.3 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | keys: Protect the type name while describing a key |
| CVE-2026-100082 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | xen-blkback: Avoid UAF when reading I/O statistics |
| CVE-2026-99218 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | coredump: hold RCU while releasing parked threads |
| CVE-2026-99222 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | keys: Protect the read method check against type removal |
| CVE-2026-99225 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | keys: Check the authorization payload in process keyring searches |
| CVE-2026-99226 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | keys: Avoid the owner account dereference in named keyring lookup |
| CVE-2026-99243 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | io-wq: order the exit bit against worker creation task work |
| CVE-2026-99245 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | KEYS: Fix key_reject_and_link() race with keyring restriction |
| CVE-2026-99255 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring/io-wq: don't hide a link from cancellations |
| CVE-2026-99262 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring/timeout: don't lose a cancel as io-wq arms a timeout |
| CVE-2026-99284 | Normal | 4.7 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | net: skbuff: propagate shared-frag marker in skb_zerocopy() |
| CVE-2026-100407 | Normal | 4.4 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Git for Windows: git-credential-wincred OAuth Store Heap Overflow |
| CVE-2026-100408 | Normal | 4.4 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Git for Windows: git-credential-wincred Erase Path Heap Overflow |
| CVE-2026-99233 | Normal | 4.4 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | tracing/histograms: Verify event_call identity when updating synth_event refcount |
| CVE-2026-99235 | Normal | 4.4 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | tracing: Save the event file instead of the compatible histogram |
| CVE-2026-99219 | Normal | 4.1 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | ftrace: Initialize modname and offset in print_rec() |
| CVE-2026-99247 | Normal | 4.1 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | tracing: Do not initialize tracefs work if tracing is disabled |
| CVE-2026-99251 | Normal | 4.1 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Drivers: hv: Avoid infinite retry loop in init_vp_index() |
| CVE-2026-99282 | Normal | 4.1 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | net/sched: sch_teql: fix use-after-free on lower qdisc drop |
| CVE-2026-123876 | Normal | 4.4 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation |
| CVE-2026-99234 | Normal | 3.4 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | tracing: Unregister field variable histograms when the command fails |
| CVE-2026-120453 | Normal | 3.3 | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header |
| CVE-2026-120754 | Normal | 3.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter |
| CVE-2026-99223 | Normal | 3.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | keys: make keyring indexes independent of kernel addresses |
| CVE-2026-99260 | Normal | 3.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | ntfs: fix resident conversion in ntfs_new_attr_flags |
| CVE-2026-99261 | Normal | 3.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction |
| CVE-2026-99268 | Normal | 3.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring: wake ring pollers for local task_work |
| CVE-2026-99221 | Normal | 2.5 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | keys/trusted_keys: return immediately after TPM unseal failure |
| CVE-2026-99249 | Normal | 2.5 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | pid_namespace: make zap_pid_ns_processes() freezable |
| CVE-2026-99263 | Normal | 2.5 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | io_uring/poll: avoid retry wakeup loss when dropping ownership |
| CVE-2026-99256 | Normal | 2.3 | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | dm cache: fix issue with background work locking |
| CVE-2026-121029 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121029: Incorrect authorization |
| CVE-2026-121031 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121031: Missing authorization |
| CVE-2026-121032 | Normal | — | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121032: Out of bounds read |
| CVE-2026-121085 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121085: Incorrect authorization |
| CVE-2026-121093 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121093: Out of bounds read |
| CVE-2026-121095 | Normal | — | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121095: Uninitialized resource |
| CVE-2026-121096 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121096: Incomplete cleanup |
| CVE-2026-121101 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121101: Missing authorization |
| CVE-2026-121103 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121103: Incorrect authorization |
| CVE-2026-121109 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121109: Inadequate encryption strength |
| CVE-2026-121111 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121111: Incorrect authorization |
| CVE-2026-121115 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121115: Improper input validation |
| CVE-2026-121136 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121136: Missing authorization |
| CVE-2026-121175 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121175: Improper resource exposure |
| CVE-2026-121190 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121190: UI misrepresentation |
| CVE-2026-121193 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121193: Incorrect authorization |
| CVE-2026-121197 | Normal | — | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121197: Out of bounds read |
| CVE-2026-121207 | Normal | — | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121207: Uninitialized resource |
| CVE-2026-121209 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121209: UI misrepresentation |
| CVE-2026-121220 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121220: Incorrect authorization |
| CVE-2026-121223 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121223: Observable discrepancy |
| CVE-2026-121227 | Normal | — | Important | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121227: Uninitialized resource |
| CVE-2026-121231 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121231: Incorrect authorization |
| CVE-2026-121237 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121237: Improper state validation |
| CVE-2026-121240 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121240: Improper input validation |
| CVE-2026-121242 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121242: Improper input validation |
| CVE-2026-121248 | Normal | — | Moderate | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121248: Incorrect authorization |
| CVE-2026-121253 | Normal | — | Low | — | Browser (Edge auto-update) | Edge / Chromium | Chromium CVE-2026-121253: Missing authorization |
| CVE-2026-119776 | Normal | — | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses |
| CVE-2026-120689 | Normal | — | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File |
| CVE-2026-121520 | Normal | — | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | Malicious client could set xattr value outside of BuildKit state directory |
| CVE-2026-113431 | Normal | — | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion |
| CVE-2026-124249 | Normal | — | Moderate | — | Linux / third-party (patch via OS vendor) | Linux / other | `http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validation |
| CVE-2026-19552 | Normal | — | Low | — | Linux / third-party (patch via OS vendor) | Linux / other | ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity |
| CVE-2026-54914 | Normal | — | Important | — | Linux / third-party (patch via OS vendor) | Linux / other | WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer |