{"vulnerability": "CVE-2026-5864", "sightings": [{"uuid": "b69a2992-154f-4246-91ff-78bc23dcbe00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5864", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260409", "content": "", "creation_timestamp": "2026-04-08T18:00:00.000000Z"}, {"uuid": "5e3ded92-7e93-444e-8433-ee51ac9dcdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5864", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "d3f06d3c-a9c0-4ed0-9a41-48339b212dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5864", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "71943b9b-1956-4151-83db-5cfee85618bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5864", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "56fd2dfd-7a6c-4427-86ed-159af8b50136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/CyberDispatch/2288", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.\n\nCISA has now added it to KEV.", "creation_timestamp": "2026-08-30T00:00:28.711644Z"}, {"uuid": "f3f10a7f-99c1-4d6a-8323-14354a16d3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/CyberDispatch/2311", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.", "creation_timestamp": "2026-08-30T00:00:28.842143Z"}, {"uuid": "2c0fe0ea-022a-404f-aeca-04c3ebe0ba60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.199311Z"}, {"uuid": "5f9185dc-77f3-4e0f-8f20-f70ef5f997f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-58644.yaml", "content": "", "creation_timestamp": "2026-08-14T06:00:15.306903Z"}, {"uuid": "834f69ad-66db-4307-a868-6ccfac38ac19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-58644.yaml", "content": "", "creation_timestamp": "2026-08-17T00:00:08.893691Z"}, {"uuid": "a7404684-efce-4281-a79f-3c86f1269492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:12.484064Z"}, {"uuid": "c2cdc47b-4c35-4a9b-8e26-4f6ffc40cb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/pphm_HackerNews/2135", "content": "\ud83d\udd34 Fresh SharePoint Vulnerability Exploited Soon After Disclosure\n\nThreat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns.\n\nTracked as CVE-2026-58644 (CVSS score of 9.8) and fixed as part of Microsoft\u2019s July 2026 Patch Tuesday updates, the flaw is described as a deserialization of untrusted data issue.\n\n\u201cIn a network-based attack, an attacker authenticated as at least a Site Owner could write arbitrary code to inject and execute code remotely on the SharePoint Server,\u201d Microsoft explains.", "creation_timestamp": "2026-08-21T23:00:08.593619Z"}, {"uuid": "8afe5a02-94e3-4d4b-ba5c-7a7e995aa75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-58644.yaml", "content": "", "creation_timestamp": "2026-08-15T00:00:06.284823Z"}, {"uuid": "50333b80-18a9-48a8-9889-ed9462666f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:17:45.992912Z"}, {"uuid": "f030131e-c7dc-4547-8414-8a0a31687573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtcqrm6hbk25", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Fortinet FortiSandbox\u3068Microsoft SharePoint\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\nCVE-2026-25089  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09Fortinet FortiSandbox OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027  \nCVE-2026-39808  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09Fortinet FortiSandbox OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027  \nCVE-2026-58644  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09Microsoft SharePoint\u306b...", "creation_timestamp": "2026-08-17T22:28:09.507647Z"}, {"uuid": "f250dbbd-379e-4798-803a-b95ddc01e6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:30.548838Z"}, {"uuid": "1ebfa98b-1967-4d1d-99f5-80b04fba1eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/pphm_HackerNews/2135", "content": "\ud83d\udd34 Fresh SharePoint Vulnerability Exploited Soon After Disclosure\n\nThreat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns.\n\nTracked as CVE-2026-58644 (CVSS score of 9.8) and fixed as part of Microsoft\u2019s July 2026 Patch Tuesday updates, the flaw is described as a deserialization of untrusted data issue.\n\n\u201cIn a network-based attack, an attacker authenticated as at least a Site Owner could write arbitrary code to inject and execute code remotely on the SharePoint Server,\u201d Microsoft explains.", "creation_timestamp": "2026-08-22T00:00:12.090117Z"}, {"uuid": "e664776b-44f6-433e-8a15-f6030b904638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/true_secator/8521", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Loongson, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u0438 \u043d\u0435 \u043f\u043e\u0434\u043b\u0435\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e LoongLeak \u044d\u0442\u043e \u043d\u0435 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Meltdown \u0438 Spectre, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u0447\u0438\u043f\u0430\u0445 Intel \u0438 AMD.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD. \u041e\u043d \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432\u0441\u0435\u0433\u043e \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0426\u041f \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b (PSP), \u0440\u0435\u0436\u0438\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM) \u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 AMD 15h \u0438 16h, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 2011 \u043f\u043e 2015 \u0433\u043e\u0434. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Puma \u0438 Jaguar, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u044f\u0445 PlayStation 4 \u0438 Xbox One. AMD \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434.\n\n3. \u042d\u043a\u0441\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0-day \u0432 GeoServer \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438:\u00a0\u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0432 Twitter.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438. GeoServer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443.\n\n4. \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e CVE-2026-58231 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 SAP. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP Commerce Cloud.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a SAP \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. [\u00a0Defused\u00a0//\u00a0]\n\n5. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 OpenCart. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0441\u0432\u043e\u0438\u0445 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 OpenCart.\n\n6. WatchTowr Labs \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e CVE-2026-8452 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n7. VulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 CVE-2026-14863, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0432 FileRun, \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u0441 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Positive Technologies \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ViPNet Client (BDU:2026\u201309885), \u044f\u0434\u0440\u0430 Microsoft Windows (CVE-2026-42980) \u0438 Microsoft SharePoint (CVE-2026-56164 \u0438 CVE-2026-58644).", "creation_timestamp": "2026-08-19T03:00:04.578940Z"}, {"uuid": "92b52726-d4b2-4eef-8f47-0ed7750fb8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:37.510054Z"}, {"uuid": "f9305048-e4b9-4040-a9e2-695f25c8e2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxrifc6kk23", "content": "CISA\u3001\u65b0\u305f\u306a\u8106\u5f31\u6027\u653b\u6483\u3092\u53d7\u3051SharePoint\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u3092\u8981\u8acb\nLast Revised July 28, 2026\n\nCISA\u306f\u3001\u8106\u5f31\u6027CVE-2026-32201\u3001CVE-2026-45659\u3001CVE-2026-56164\u3001CVE-2026-58644\u3001\u304a\u3088\u3073CVE-2026-50522\u304c\u60aa\u7528\u3055\u308c\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u8005\u304c\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u306eSharePoint Server\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u8a8d\u8b58\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u3059\u3079\u3066\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9SharePoint Server\u30d0\u30fc\u30b8\u30e7\u30f3\uff08Subscription Edition\u30012019\u3001\u304a...", "creation_timestamp": "2026-08-13T13:41:34.698783Z"}, {"uuid": "dedb7820-61bd-4df9-8a21-0a85ef7f2dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/true_secator/8521", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Loongson, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u0438 \u043d\u0435 \u043f\u043e\u0434\u043b\u0435\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e LoongLeak \u044d\u0442\u043e \u043d\u0435 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Meltdown \u0438 Spectre, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u0447\u0438\u043f\u0430\u0445 Intel \u0438 AMD.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD. \u041e\u043d \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432\u0441\u0435\u0433\u043e \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0426\u041f \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b (PSP), \u0440\u0435\u0436\u0438\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM) \u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 AMD 15h \u0438 16h, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 2011 \u043f\u043e 2015 \u0433\u043e\u0434. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Puma \u0438 Jaguar, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u044f\u0445 PlayStation 4 \u0438 Xbox One. AMD \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434.\n\n3. \u042d\u043a\u0441\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0-day \u0432 GeoServer \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438:\u00a0\u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0432 Twitter.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438. GeoServer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443.\n\n4. \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e CVE-2026-58231 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 SAP. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SAP Commerce Cloud.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a SAP \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. [\u00a0Defused\u00a0//\u00a0]\n\n5. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 OpenCart. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0441\u0432\u043e\u0438\u0445 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 OpenCart.\n\n6. WatchTowr Labs \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e CVE-2026-8452 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n7. VulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 CVE-2026-14863, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0432 FileRun, \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u0441 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Positive Technologies \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ViPNet Client (BDU:2026\u201309885), \u044f\u0434\u0440\u0430 Microsoft Windows (CVE-2026-42980) \u0438 Microsoft SharePoint (CVE-2026-56164 \u0438 CVE-2026-58644).", "creation_timestamp": "2026-08-20T00:00:29.619110Z"}, {"uuid": "32083427-9b72-4319-bf1e-538ba352d7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.jpcert.or.jp/english/at/2026/at260020.html", "content": "", "creation_timestamp": "2026-08-07T00:45:06.313292Z"}, {"uuid": "ae6e8d9c-e565-4303-9f44-2dfeb56dc829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:52.676988Z"}, {"uuid": "83354dda-1d23-46dd-ac21-d06839d6b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-58644.yaml", "content": "", "creation_timestamp": "2026-08-16T00:00:07.620339Z"}, {"uuid": "fa36d380-875e-45e1-bbbc-06ea0e36ffd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:33.601427Z"}, {"uuid": "2519a303-9e11-4631-8cc5-8fa1dd6b8882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/CyberDispatch/2311", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.", "creation_timestamp": "2026-08-29T20:00:07.290131Z"}, {"uuid": "efa9b9b8-def2-4362-b78e-0044396b4128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/CyberDispatch/2288", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.\n\nCISA has now added it to KEV.", "creation_timestamp": "2026-08-29T20:00:07.423260Z"}, {"uuid": "19e2ae09-301e-428b-8013-2cc8fc716325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:52.908244Z"}, {"uuid": "afb09ef8-f8b1-41e5-9504-9afd3f67896b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:24.373156Z"}, {"uuid": "9c8ae14a-0c72-4df8-ab19-df5ea0710336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.712487Z"}, {"uuid": "ef14acf4-9801-4f86-b811-f88170efd131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmyyci4sl2v", "content": "CVE-2026-58644 - microsoft sharepoint enterprise server 2016\nMicrosoft SharePoint's data processing feature can be exploited by attackers to run malicious code on a target system. This is a serious issue because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-14T20:06:04.203601Z"}, {"uuid": "ca823192-4d45-4701-895b-0ca0a2fe36b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:05.557273Z"}, {"uuid": "ed25c54a-27ee-4c00-8554-86973447048b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:20.822445Z"}, {"uuid": "8e26255a-af6e-462a-a6f9-92e6be23daa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:13.594502Z"}, {"uuid": "1dcf772b-ba4b-4289-b395-b07d6b899606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mqnh3fzl4l22", "content": "Microsoft Office SharePoint contains a critical deserialization flaw, CVE-2026-58644, that lets an unauthenticated attacker run code over the network.", "creation_timestamp": "2026-07-15T00:18:20.803059Z"}, {"uuid": "f58da547-418b-4eb1-ac20-da6539578767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:46.984603Z"}, {"uuid": "ec74c5b3-14e4-408a-9e22-7678c2c2d44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:04.863151Z"}, {"uuid": "f1c4dc55-dbf2-407f-ad83-8984d941be32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:57.018186Z"}, {"uuid": "47a0c0ec-4eae-4d78-b450-dcb218b22059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:48.628126Z"}, {"uuid": "5c4845ac-4d6a-430f-ae93-d432e0f23408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:37.666490Z"}, {"uuid": "9e1a8aed-506c-45b2-8c13-f1b71a40961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:44.240849Z"}, {"uuid": "564f1f31-c99b-4269-a6a7-67eca5d4a52c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:49.274840Z"}, {"uuid": "ae5ea840-8dde-4a61-954f-95e9bc52bd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-017-critical-vulnerabilities-impacting-microsoft-sharepoint-server-cve-2026-56164-cve-2026-55040-cve-2026-58644", "content": "", "creation_timestamp": "2026-07-15T20:15:07.806335Z"}, {"uuid": "8102b1ad-e161-4ac3-bc48-b33f13d479d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqay4r2mv2t", "content": "\ud83d\udccc CVE-2026-58644 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-58644", "creation_timestamp": "2026-07-16T03:07:07.362998Z"}, {"uuid": "593b7049-5520-4507-bcf2-89aaa5f29797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:46:02.873098Z"}, {"uuid": "7b9b38c4-a8ba-4ca2-805b-cc978045a277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:46:31.926109Z"}, {"uuid": "c1f36542-4f66-463b-88a7-540c8736e5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:48:12.867545Z"}, {"uuid": "b182e2c2-1569-41ed-92fb-60e18c070509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mqrqdsrp5n2e", "content": "\ud83d\uded1 CVE-2026-58644\nMicrosoft SharePoint\nCVSS 9.8 / EPSS 1% / KEV: No\nTL;DR: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorize\u2026\nhttps://cvesentinel.com/report/CVE-2026-58644?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-16T17:14:45.311626Z"}, {"uuid": "4c65941f-7d10-41da-b087-bfdf54d4c0a9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82f557a4-d17f-499d-b1ca-644d12a40db6", "content": "", "creation_timestamp": "2026-07-16T18:00:01.785070Z"}, {"uuid": "fb24d8a7-f8c1-4d7a-be21-b8623be60961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-july-2026-monthly-rollup-av26-698", "content": "", "creation_timestamp": "2026-07-16T20:15:03.357259Z"}, {"uuid": "87a2db88-723f-44ee-9b06-48bfc642a7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqseii3dun24", "content": "CVE-2026-58643: Windows Admin Center Spoofing Vulnerability Requires Immediate Action #CVE2026 #WindowsAdminCenter #CyberSecurity", "creation_timestamp": "2026-07-16T23:15:17.111023Z"}, {"uuid": "6e7dc474-08a6-4e65-b24b-d47abfd6d8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqseijyguw2y", "content": "CVE-2026-58643: Windows Admin Center Spoofing Vulnerability Exposes Administrators #CyberSecurity #CVE2026 #WindowsAdminCenter", "creation_timestamp": "2026-07-16T23:15:19.139517Z"}, {"uuid": "6a97f784-c92d-4c22-a1b0-b673bd1526f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqseilupjy2b", "content": "CVE-2026-58643: Windows Admin Center Spoofing Exploits Blind Spots in Governance #CVE202658643 #Cybersecurity #PrivacyProtection", "creation_timestamp": "2026-07-16T23:15:20.942343Z"}, {"uuid": "9b1975de-9b2d-4c40-8635-ed4df29d1c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqseintl6o2b", "content": "CVE-2026-58643: Windows Admin Center Spoofing Vulnerability Exposes Critical Uncertainty #CVE202658643 #WindowsAdminCenter #SpoofingVulnerability", "creation_timestamp": "2026-07-16T23:15:23.065010Z"}, {"uuid": "477d5850-fb50-4dd8-a7a9-08f05797303e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqseiquutf2i", "content": "CVE-2026-58643: Windows Admin Center Spoofing Claims Lack Evidence #CVE2026 #WindowsAdminCenter #CyberSecurity", "creation_timestamp": "2026-07-16T23:15:26.238926Z"}, {"uuid": "8e98e020-59e3-4a70-b92d-dba92c0d7b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqsemonzih2t", "content": "CVE-2026-58643: Urgence of Response or a Misguided Overreaction? #CVE202658643 #WindowsAdminCenter #Cybersecurity", "creation_timestamp": "2026-07-16T23:17:38.301346Z"}, {"uuid": "9d1b69fb-7b2b-41a5-b590-e53fe1253f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgdwx26o2o", "content": "CVE-2026-58643 - Windows Admin Center Spoofing Vulnerability\nCVE ID : CVE-2026-58643\n \n Published : July 16, 2026, 10:17 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center ...", "creation_timestamp": "2026-07-16T23:48:31.971755Z"}, {"uuid": "8c7208ec-151d-4459-af37-9c326af96f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsmmzq2gx2f", "content": "CISA KEV catalog adds three actively exploited flaws: FortiSandbox CVE-2026-25089, CVE-2026-39808, and SharePoint CVE-2026-58644. Patch by July 19.\n\n#CISA #KEV #Fortinet #FortiSandbox #SharePoint #CVE202658644 #ActivelyExploited #CyberSecurity", "creation_timestamp": "2026-07-17T01:41:00.104019Z"}, {"uuid": "9b9a71be-5db4-47bc-9f1b-07ec740eace5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqtb4l4s4l2n", "content": "\ud83e\udd16 CVE-2026-58644 (CVSS 9.8): Active exploitation of a critical deserialization RCE in MS SharePoint Server. CISA added to KEV, patch by July 19.\nhttps://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "creation_timestamp": "2026-07-17T07:47:36.711469Z"}, {"uuid": "33089048-ce20-4f18-8f91-828021ced157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mqt6vhbpmi2l", "content": "CVE-2026-58644 \u2014 SharePoint deserialization RCE (9.8). CISA KEV, active exploitation, due July 19. 48 hours to patch.\n\nhttps://trinity.sh/posts/2026-07-17-sharepoint-deserialization-kev/", "creation_timestamp": "2026-07-17T07:07:49.148527Z"}, {"uuid": "40e97442-76d7-44b2-8501-d7d686c9b2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/fabiansilva.bsky.social/post/3mqt7daepe42m", "content": "\ud83d\udcf0 THN: CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV PentestHQ #CISA #SharePoint #Cybersecurity #Vulnerabilities #RCE", "creation_timestamp": "2026-07-17T07:15:32.223007Z"}, {"uuid": "95ce493c-e510-49fa-891a-23460db03d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqt7p3ddo32h", "content": "Threat actors are exploiting a critical SharePoint RCE flaw (CVE-2026-58644), prompting CISA KEV listing and a three-day patch mandate for federal agencies.\n", "creation_timestamp": "2026-07-17T07:22:09.609696Z"}, {"uuid": "60d30c53-19ba-4993-a09c-80428ec3838c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqt7x6hq352r", "content": "\u516c\u958b\u76f4\u5f8c\u306b\u60aa\u7528\u304c\u59cb\u307e\u3063\u305f\u65b0\u305f\u306aSharePoint\u8106\u5f31\u6027\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u95a2CISA\u306f\u3001Microsoft SharePoint\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306e\u65b0\u305f\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u8106\u5f31\u6027\u304c\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306b\u3088\u3063\u3066\u3059\u3067\u306b\u60aa\u7528\u3055\u308c\u59cb\u3081\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-58644(CVSS\u30b9\u30b3\u30a29.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001Microsof", "creation_timestamp": "2026-07-17T07:26:40.796847Z"}, {"uuid": "36bfe483-3ef6-4a0d-87a8-36e16a705fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116934143250146621", "content": "CVE-2026-58644: CRITICAL RCE in Microsoft SharePoint enables remote, authenticated Site Owners to execute code via deserialization. Exploited in the wild \u2014 patch now (July 2026 updates). Details: https://radar.offseq.com/threat/fresh-sharepoint-vulnerability-exploited-soon-afte-951942a1c69ed88b #OffSeq #SharePoint #Vuln #KEV #Infosec", "creation_timestamp": "2026-07-17T07:30:26.816592Z"}, {"uuid": "eca92224-c4fa-49fa-a240-0f1a52082a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqta5x7zbk2d", "content": "Microsoft SharePoint CRITICAL RCE (CVE-2026-58644) is now exploited in the wild. Authenticated Site Owners can run arbitrary code. Patch with July 2026 updates ASAP. https://radar.offseq.com/threat/fresh-sharepoint-vulnerability-exploited-soon-afte-951942a1c69ed88b #OffSeq #SharePoint #Vuln", "creation_timestamp": "2026-07-17T07:30:28.889408Z"}, {"uuid": "aa97b7d3-51d6-417d-84d3-02e729027579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mqtaaau45s2b", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV\n\nthehackernews.com/2026/07/cisa...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-07-17T07:31:47.381334Z"}, {"uuid": "e6f2362f-58b2-46fd-8b37-6ded4c6d6dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mqtaozmg772m", "content": "SharePoint zero-day CVE-2026-58644 is under active attack - patch it or attackers forge ViewState keys that survive the fix. https://intel.threadlinqs.com/threat/TL-2026-1434 #ThreatIntel #CVE_2026_58644 #CVE_2026_32201 #ysoserialnet", "creation_timestamp": "2026-07-17T07:40:01.883356Z"}, {"uuid": "91ab1f98-fc11-4f4b-8ace-c7a01ae84cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/ctinow/253489", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV\nhttps://ift.tt/r4qx8sF", "creation_timestamp": "2026-07-17T08:00:05.460144Z"}, {"uuid": "0d795fd6-7e28-433b-8d35-0dce0667bc27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/thehackernews/9531", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.\n\nCISA has now added it to KEV.\n\nHere's what SharePoint admins need to check: https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "creation_timestamp": "2026-07-17T08:00:06.029031Z"}, {"uuid": "16ce928d-bdd0-46ff-addb-56e835fb66a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mqtdtzs43m2j", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV", "creation_timestamp": "2026-07-17T08:36:30.697805Z"}, {"uuid": "17745445-07e5-4252-aca4-71db6a6c3e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/11936", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV \u2013 thehackernews.com\n\nFri, 17 Jul 2026 14:42:23", "creation_timestamp": "2026-07-17T09:00:05.353653Z"}, {"uuid": "1e6fab4b-6224-4c08-9837-d92c65cb8a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mqth3vef3y2u", "content": "CISA added a critical Microsoft SharePoint Server vulnerability, CVE-2026-58644, to its Known Exploited Vulnerabilities catalog. The flaw allows unauthenticated remote [\u2026]", "creation_timestamp": "2026-07-17T09:34:35.744107Z"}, {"uuid": "2cc02af8-6dab-49c7-9d11-26e3abee06f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybelangel.bsky.social/post/3mqtii3xdj22i", "content": "CISA has added CVE-2026-58644 to its Known Exploited Vulnerabilities catalog, a critical SharePoint RCE zero-day with a CVSS score of 9.8, exploited in the wild before Microsoft's July 14 patch.\n\n If SharePoint is in your environment, this one does not wait: thehackernews.com/2026/07/cisa...", "creation_timestamp": "2026-07-17T09:59:21.137969Z"}, {"uuid": "fb92a272-b927-4d70-a1d8-dffa0f4d87c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mqtilzjvt72a", "content": "CISA\u3001\u60aa\u7528\u3055\u308c\u305fSharePoint RCE \u30bc\u30ed\u30c7\u30a4 CVE-2026-58644 \u3092 KEV \u306b\u8ffd\u52a0\n\nMicrosoft SharePoint\u306e CVE-2026-58644 \u306f\u30d1\u30c3\u30c1\u524d\u306b\u60aa\u7528\u3055\u308c\u3001\u30b5\u30dd\u30fc\u30c8\u5bfe\u8c61\u306e\u3059\u3079\u3066\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u5f71\u97ff\u3002RCE \u304c\u53ef\u80fd\u306a\u8106\u5f31\u6027\u3068\u3057\u3066 CISA \u304c\u6ce8\u8996\u4e2d\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306e\u5373\u6642\u9069\u7528\u304c\u6025\u52d9\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-17T10:01:30.757995Z"}, {"uuid": "d5685476-b801-475f-bc71-af3c8fa27b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026.\n\nThe vulnerability in question is CVE-2026-58644 (CVSS score: 9.8), a critical deserialization", "creation_timestamp": "2026-07-17T10:00:43.109184Z"}, {"uuid": "5fc6ee97-b7fd-41cf-8841-57f42dbd29e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-17T10:00:44.540370Z"}, {"uuid": "70c52764-ccf0-4810-a1b4-45fc01fa9a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqtitycrmp2b", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nCISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV\n\nhttps://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-07-17T10:05:57.372848Z"}, {"uuid": "c7af0f9d-2cf1-443d-8579-6d75106449ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqtcaanzzb2m", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV", "creation_timestamp": "2026-07-17T10:08:08.153230Z"}, {"uuid": "b5b4e335-769e-4f17-9ca6-1c6eaf9dc6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mqtkx5qucv2g", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-07-17T10:43:31.857959Z"}, {"uuid": "fe244415-350d-47ce-a821-7ca71daca30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mqtpakl3o62f", "content": "SharePoint Server: CISA added exploited RCE zero-day CVE-2026-58644 to KEV. If you run it, apply the vendor patch ASAP and verify exposure, logging, and scanning. #Cybersecurity #Vulnerability #ZeroDay\n\nSource: https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "creation_timestamp": "2026-07-17T12:00:22.320966Z"}, {"uuid": "ae54a14e-5f64-498e-ae23-8011cbd91c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqtq3dp4yb2x", "content": "CISA says attackers are exploiting CVE-2026-58644, a critical Microsoft SharePoint RCE flaw patched in July 2026 and now in the KEV catalog after confirmed exploitation. #SharePoint #CISA #Microsoft", "creation_timestamp": "2026-07-17T12:15:20.771067Z"}, {"uuid": "f14e0dd8-2b9a-4d06-99bf-faa040e0f387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mqtufzskfa2l", "content": "CISA says critical SharePoint CVE-2026-58644 is already being exploited. If you run on-prem SharePoint, apply Microsoft\u2019s update now, check internet exposure, and preserve logs for forensic review\u2014not just patch and move on. \ud83d\uded1\n\n#SharePoint #Security #Cybersecurity", "creation_timestamp": "2026-07-17T13:32:54.707153Z"}, {"uuid": "afcb047c-0a4b-45b7-be0e-89ae979416af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/bdufstecru/3323", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition \u0438 Microsoft SharePoint Enterprise Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09928\nCVE-2026-58644\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644", "creation_timestamp": "2026-07-17T14:00:06.155435Z"}, {"uuid": "d8416c37-8902-43fb-beaf-7b2a1bf32a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwt7bfv2z", "content": "\ud83d\udd17 CVE : CVE-2026-59117, CVE-2026-58598, CVE-2026-59117, CVE-2026-59117, CVE-2026-56171, CVE-2026-58598, CVE-2026-58643, CVE-2026-59117", "creation_timestamp": "2026-07-17T14:00:11.403695Z"}, {"uuid": "462890de-a565-4700-8ae7-466f9b21d692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqtw2rbk3r2n", "content": "\u2705 Takeaway: SharePoint CVE-2026-58644 (KEV), the LegacyHive Windows EoP PoC, and FortiSandbox RCEs are today's priorities \u2014 all internet-reachable. Patch exposed servers now, hunt IoCs, and watch for LegacyHive weaponization. Stay vigilant. #CyberSecurity #InfoSec", "creation_timestamp": "2026-07-17T14:02:23.680974Z"}, {"uuid": "71b07a43-fd68-4fa2-97c3-13ea47734987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mqtz2jw3h224", "content": "Today's #CTI brief for 2026-07-17: \n\nThe patch queue is now an incident-response queue. CISA added CVE-2026-58644 to the exploited SharePoint set, plus two FortiSandbox command-injection flaws.\n\n#SharePoint #Fortinet #VulnMgmt", "creation_timestamp": "2026-07-17T14:55:57.339188Z"}, {"uuid": "7ca49fba-f2e5-4b33-8314-0a9d56a9d30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mqtz2jzguk24", "content": "Today's #CTI brief for 2026-07-17: \n\nThe patch queue is now an incident-response queue. CISA added CVE-2026-58644 to the exploited SharePoint set, plus two FortiSandbox command-injection flaws.\n\n#SharePoint #Fortinet #VulnMgmt", "creation_timestamp": "2026-07-17T14:55:57.767919Z"}, {"uuid": "af5a6d1e-5400-4e44-89a9-915720d200ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mqtz2jzgul24", "content": "Today's #CTI brief for 2026-07-17: \n\nThe patch queue is now an incident-response queue. CISA added CVE-2026-58644 to the exploited SharePoint set, plus two FortiSandbox command-injection flaws.\n\n#SharePoint #Fortinet #VulnMgmt", "creation_timestamp": "2026-07-17T14:55:58.210701Z"}, {"uuid": "d170e804-71a7-44f8-b2eb-e546c70beaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mqtz2jzit324", "content": "Today's #CTI brief for 2026-07-17: \n\nThe patch queue is now an incident-response queue. CISA added CVE-2026-58644 to the exploited SharePoint set, plus two FortiSandbox command-injection flaws.\n\n#SharePoint #Fortinet #VulnMgmt", "creation_timestamp": "2026-07-17T14:55:58.652379Z"}, {"uuid": "6e424ddb-5f69-464e-ac62-3973823ded1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mqtz2jzjsd24", "content": "Today's #CTI brief for 2026-07-17: \n\nThe patch queue is now an incident-response queue. CISA added CVE-2026-58644 to the exploited SharePoint set, plus two FortiSandbox command-injection flaws.\n\n#SharePoint #Fortinet #VulnMgmt", "creation_timestamp": "2026-07-17T14:55:59.080660Z"}, {"uuid": "0aff97ef-33ca-4245-a795-babbfe910b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116936112033271356", "content": "Broadcom has new advisories addressing two high-severity vulnerabilities that were fist published on the 15th https://support.broadcom.com/web/ecx/security-advisory\nCisco:\nMedium Severity: CVE-2025-20204and CVE-2025-20205 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-42tgsdMG @TalosSecurity\nAnd if you missed this yesterday, CISA added two Fortinet vulnerabilities to the catalogue:\nCISA:\nCVE-2026-39808: Fortinet FortiSandbox OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-39808 \nCVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-25089\nAnd a Microsoft vulnerability:\nCISA: CVE-2026-58644: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58644 #Microsoft #CISA #Fortinet #infosec #vulnerability #Cisco #Broadcom", "creation_timestamp": "2026-07-17T15:51:08.202086Z"}, {"uuid": "a3354036-7d1f-48df-ac17-2214774dcc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116936278340514936", "content": "\ud83d\udcf0 CISA KEV Alert: SharePoint RCE zero-day exploited in the wild\n\ud83d\udea8 CISA KEV ALERT: A critical SharePoint RCE zero-day (CVE-2026-58644) is actively exploited. The 9.8 CVSS flaw allows authenticated attackers to take over servers. Patch immediately! #SharePoint #CyberSecurity #ZeroDay #RCE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-exploited-sharepoint-rce-zero-day-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-17T16:33:26.157775Z"}, {"uuid": "5757b484-07cd-4bef-b48d-e5c8519faa7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqu6joxwmz2j", "content": "\ud83d\udea8 CISA KEV ALERT: A critical SharePoint RCE zero-day (CVE-2026-58644) is actively exploited. The 9.8 CVSS flaw allows authenticated attackers to take over servers. Patch immediately! #SharePoint #CyberSecurity #ZeroDay #RCE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-17T16:33:55.816529Z"}, {"uuid": "8ff4f07d-fdab-4d76-acee-8a19122a7f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujp5hucs2y", "content": "CVE-2026-58644: Microsoft SharePoint's Vulnerability Demands Clarified Response #CVE202658644 #MicrosoftSharePoint #CyberSecurity", "creation_timestamp": "2026-07-17T19:53:49.158604Z"}, {"uuid": "1cb54532-3ecd-4d88-8d8b-fad957b1f4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://bsky.app/profile/dustinchilds.bsky.social/post/3mquicyd5js2o", "content": "As if Tuesday wasn't enough, #Microsoft released 4 more patches yesterday: \nCVE-2026-56171: RDP Information Disclosure Vulnerability\nCVE-2026-58598: Backup Service EoP Vulnerability\nCVE-2026-58643: Admin Center Spoofing Vulnerability\nCVE-2026-59117: Windows Terminal RCE Vulnerability", "creation_timestamp": "2026-07-17T19:29:06.973485Z"}, {"uuid": "36616fdd-3b8b-40d9-99ed-ee2d198bf343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujoxwfj62m", "content": "CVE-2026-58644: Microsoft SharePoint Vulnerability Is Already Under Attack #Cybersecurity #Vulnerability #MicrosoftSharePoint", "creation_timestamp": "2026-07-17T19:53:43.421211Z"}, {"uuid": "e711f4c9-3b7d-4fa9-8be9-498cc9d547f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujozlcwk2l", "content": "CVE-2026-58644: Microsoft SharePoint Server Exploit Threatens Unpatched Environments #CVE2026 #MicrosoftSharePoint #RCE", "creation_timestamp": "2026-07-17T19:53:45.528187Z"}, {"uuid": "6219d814-6ba8-49c5-b94f-ff996aa8dcf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujp3ftyo23", "content": "CVE-2026-58644: Microsoft SharePoint's Critical Vulnerability Sparks Concern #CVE202658644 #MicrosoftSharePoint #CyberSecurity", "creation_timestamp": "2026-07-17T19:53:47.139451Z"}, {"uuid": "7ad79761-ae28-4263-8340-2b827eba325c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujt57gzw23", "content": "CVE-2026-58644: Microsoft's Unexplained SharePoint Vulnerability Exploitation Raises Concerns #CVE2026 #SharePoint #Cybersecurity", "creation_timestamp": "2026-07-17T19:56:03.492351Z"}, {"uuid": "9e108104-8633-4174-8f9d-1bc494979d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqujt7e2dw23", "content": "CVE-2026-58644: A Crisis of Trust or a Manageable Risk for SharePoint Users? #CVE2026 #SharePoint #CyberSecurity", "creation_timestamp": "2026-07-17T19:56:05.585438Z"}, {"uuid": "46166289-b129-4786-a419-b0b55e9115e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqun3imxcw2r", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-58644: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a networ\u2026\nCVSS 9.8 \u00b7 EPSS 1.5% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-58644\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-17T20:54:24.205821Z"}, {"uuid": "81c39ce6-5349-463b-8e5f-d2d290be2b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqunja2zpn2g", "content": "\ud83d\udee1\ufe0f KEV WATCH: SharePoint CVE-2026-58644 (RCE, CVSS 9.8) exploited as a zero-day, now in CISA KEV (FCEB deadline Jul 19). Fortinet FortiSandbox CVE-2026-39808 & CVE-2026-25089 \u2014 unauth RCE, confirmed exploited. Patch internet-facing gear NOW. Src: CISA / THN", "creation_timestamp": "2026-07-17T21:02:05.135195Z"}, {"uuid": "58464aa0-2a65-4f77-b741-2323f2135aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58643", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116937816139699978", "content": "Microsoft released 4 new CVEs on Thursday.  Maybe Tuesday was full?  Thursday is close enough to Tuesday?\n\nWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability CVE-2026-56171\nWindows Backup Service Elevation of Privilege Vulnerability CVE-2026-58598\nWindows Admin Center Spoofing Vulnerability CVE-2026-58643\nWindows Terminal Remote Code Execution Vulnerability CVE-2026-59117", "creation_timestamp": "2026-07-17T23:04:31.172797Z"}, {"uuid": "2b545a83-1af7-4c07-96dc-555f06f9e631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/bdufstecru/3323", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition \u0438 Microsoft SharePoint Enterprise Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09928\nCVE-2026-58644\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644", "creation_timestamp": "2026-07-18T00:00:29.631729Z"}, {"uuid": "3886a6a4-2932-4cfc-ba20-751c87ff66ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/11936", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV \u2013 thehackernews.com\n\nFri, 17 Jul 2026 14:42:23", "creation_timestamp": "2026-07-18T00:00:35.660251Z"}, {"uuid": "1f64ad82-176a-4755-b005-ca02de335e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/thehackernews/9531", "content": "Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.\n\nCVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.\n\nCISA has now added it to KEV.\n\nHere's what SharePoint admins need to check: https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "creation_timestamp": "2026-07-18T00:00:36.622303Z"}, {"uuid": "0e989c71-f9fe-4d5a-b93d-17d43c88d463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/ctinow/253489", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV\nhttps://ift.tt/r4qx8sF", "creation_timestamp": "2026-07-18T00:00:35.626574Z"}, {"uuid": "b1e11445-8b0d-47f4-8d53-6621a6cfe83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026.\n\nThe vulnerability in question is CVE-2026-58644 (CVSS score: 9.8), a critical deserialization", "creation_timestamp": "2026-07-18T01:00:45.176605Z"}, {"uuid": "82e3a524-fd13-4842-98f9-eee1a1ff8498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-18T01:00:45.362925Z"}, {"uuid": "2a938736-5db1-4f49-8635-74bf8fed4845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "Telegram/dSrPtZtWU5TOs_-aHsCLmxVeUwX3rOwZCiiXLuitYPBN2w", "content": "", "creation_timestamp": "2026-07-18T13:00:03.862915Z"}, {"uuid": "213d1948-fbe5-4822-9afb-b3e8efea23d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mqwitgn54x24", "content": "Just like Zelenskyy is fighting for Ukraine's digital sovereignty, we must fight for our personal data security against threats like CVE-2026-58644 #CybersecurityMatters", "creation_timestamp": "2026-07-18T14:43:38.562868Z"}, {"uuid": "a678e414-e28c-429c-8df8-e6814373dcbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqwljhcrf22a", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-18T15:31:45.070519Z"}, {"uuid": "a00a3705-8df5-4063-9edf-029588963d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqwtxrq72h2n", "content": "\ud83d\udea8 BREAKING: CISA added SharePoint RCE CVE-2026-58644 (CVSS 9.8) to KEV. Critical deserialization flaw \u2014 a Site Owner can run arbitrary code remotely over the internet, low attack complexity. All supported on-prem versions hit; FCEB patch deadline July 19. Src: The Hacker News", "creation_timestamp": "2026-07-18T18:02:55.109567Z"}, {"uuid": "338a45a1-95dc-4eea-a81d-a3034d739dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqx5yozm2c2o", "content": "\ud83d\udea8 RECAP: SharePoint RCE CVE-2026-58644 (CVSS 9.8) added to CISA KEV \u2014 on-prem deser flaw, FCEB deadline July 19. Separately, Inc ransomware hit SonicWall SMA 1000 via CVE-2026-15409 / CVE-2026-15410. Src: The Hacker News / Dark Reading", "creation_timestamp": "2026-07-18T21:02:23.168368Z"}, {"uuid": "cc727730-3b3a-4439-a362-0b9f0a8d9852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "Telegram/dSrPtZtWU5TOs_-aHsCLmxVeUwX3rOwZCiiXLuitYPBN2w", "content": "", "creation_timestamp": "2026-07-19T00:00:28.146274Z"}, {"uuid": "4de977cb-133c-4f06-9663-97df7ff600ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58644", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqyndwtte323", "content": "SharePoint gets exploited because it's everywhere.\n\nAnd now attackers don't even need your credentials.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-58644-sharepoint-unauthenticated-rce-exploited/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-19T11:09:47.321040Z"}, {"uuid": "9ef9d4e5-69dc-4aab-96a6-2c959e282d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/23124", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV \u2013 thehackernews.com\n\nFri, 17 Jul 2026 14:42:23", "creation_timestamp": "2026-07-19T16:00:04.682433Z"}, {"uuid": "ce70f27d-6332-43ee-a3fb-6cb005420e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/23124", "content": "CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV \u2013 thehackernews.com\n\nFri, 17 Jul 2026 14:42:23", "creation_timestamp": "2026-07-20T00:00:22.578596Z"}, {"uuid": "9955f28d-793a-4729-8e19-02823a02c5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://t.me/bhhub/1204", "content": "Weekly 8 AI & Cyber signals to act on (Jul 13\u201320, 2026)\n\n#AISecurity@bhhub\n\n\u2728 NadMesh industrializes attacks on exposed AI and MCP services\nXLab found a Go botnet combining Shodan harvesting, 20+ exploit paths, polymorphic builds, and persistence to steal cloud keys, Kubernetes tokens, and callable MCP tools. Sensors saw about 139 source IPs/day; the panel\u2019s 3,811-key claim conflicts with other counters, so treat scale cautiously.\n\n\u2728 Mandiant makes AI-assisted vulnerability management enforceable\nThe blueprint treats source code as untrusted agent input and puts deterministic policy before model judgment: isolated workloads, ZDR, short-lived repo-and-branch-bound identities, skill/MCP vetting, and runtime toxic-flow monitoring. Static scanning cannot stop post-deployment exfiltration; guard models cannot replace authorization or sandboxing.\n\n\u2728 Gold Eagle centralizes triage for AI-discovered vulnerabilities\nThe new US clearinghouse links government, AI labs, open-source maintainers, and critical infrastructure to deduplicate model-driven scanning and route fixes. Intake has begun, but no throughput, disclosure-SLA, or remediation metrics are public; performance remains unmeasured.\n\n#AppSec@bhhub\n\n\u2728 Update: a separate SharePoint RCE enters CISA KEV\nCVE-2026-58644 is an unauthenticated deserialization RCE scored 9.8. CISA added it to KEV on July 16 as actively exploited, automatable, and total impact. This is new evidence after the Jul 15 digest\u2019s separate CVE-2026-56164: patch affected on-prem 2016, 2019, and Subscription Edition builds.\n\n\u2728 Harden-Runner blocks undeclared CI egress on macOS and Windows\nVersion 2.20.0 extends egress allowlist enforcement to GitHub-hosted macOS and Windows runners handling Apple provisioning and signing keys. Teams can baseline in audit mode, then block undeclared endpoints so poisoned actions cannot exfiltrate secrets; the artifact is public, though efficacy claims are first-party.\n\n#RedTeam@bhhub\n\n\u2728 UAT-11795 hides resilient C2 behind installers, Telegram, and Polygon\nTalos found trojanized MobaXterm, WebEx, Zoom, DBeaver, and FACEIT installers delivering the new Starland RAT and WLDR memory implant. The actor can load CastleStealer or Remcos, stores fallback C2 in a Polygon contract, and sends beacons to Telegram\u2014two new implants plus durable hunting patterns.\n\n\u2728 Sandworm\u2019s UAC-0145 moves ClickFix infrastructure into smart contracts\nCERT-UA links at least 10 compromised sites, fake CAPTCHA commands, torrents, Signal lures, and counterfeit Android tools to UAC-0145. SMARTAXE selects content per visitor and retrieves its malicious domain from Ethereum before installing GHETTOVIBE; victim scale is undisclosed, but infrastructure can rotate without changing the page.\n\n#BlueTeam@bhhub\n\n\u2728 Microsoft maps two prevalent ACR Stealer chains\nOne ClickFix chain mounts WebDAV content, stages PowerShell/Python, persists by task, and can resolve C2 through blockchain RPC; the other uses MSHTA, JPEG steganography, and reflective execution. Both steal Chromium credentials, DPAPI tokens, and synced files; Microsoft reports increased activity but no victim denominator.", "creation_timestamp": "2026-07-20T10:00:04.787694Z"}, {"uuid": "ec7f8b91-6ec7-4f9c-9f63-b19859dcf9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mr37da5yae2y", "content": "\u26a0\ufe0f CRITICAL THREAT: CVE-2026-58644 targets Microsoft SharePoint via deserialization. Active exploitation is verified. Is your perimeter secured? Get the forensic detection queries and hardening playbooks you need to defend your infrastructure now. https://thecybermind.co/9pxn\n\n#CyberSecurity\u2026", "creation_timestamp": "2026-07-20T11:36:49.881687Z"}, {"uuid": "4785a07b-dc4f-4165-b194-e0622bdaff5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3aoxg4hh2o", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-56164, CVE-2026-55040, CVE-2026-15409, CVE-2026-58644, CVE-2026-15410\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-20T12:01:16.638623Z"}, {"uuid": "0daaed0b-5e1a-4e68-91a5-330a1a5ec3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.ncsc.nl/alerts/installeer-updates-voor-kwetsbaarheden-in-microsoft-office", "content": "", "creation_timestamp": "2026-07-20T12:15:07.971581Z"}, {"uuid": "7d0544ff-e02d-4f54-8cd6-f1197cdd74a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr3rypx6ey2n", "content": "Just another Tuesday in IT, as NHS England warns that on-premises Microsoft SharePoint servers are currently offering a warm welcome to unauthenticated remote attackers. This marvellous CVE-2026-58644 flaw allows malicious actors to execute arbitrary code by simply sending untrus...\n\nRead full story", "creation_timestamp": "2026-07-20T17:10:58.177581Z"}, {"uuid": "593a91fd-6fac-4163-8c17-149cada0ac11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2135", "content": "\ud83d\udd34 Fresh SharePoint Vulnerability Exploited Soon After Disclosure\n\nThreat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns.\n\nTracked as CVE-2026-58644 (CVSS score of 9.8) and fixed as part of Microsoft\u2019s July 2026 Patch Tuesday updates, the flaw is described as a deserialization of untrusted data issue.\n\n\u201cIn a network-based attack, an attacker authenticated as at least a Site Owner could write arbitrary code to inject and execute code remotely on the SharePoint Server,\u201d Microsoft explains.", "creation_timestamp": "2026-08-23T00:00:44.591175Z"}, {"uuid": "efea1ac9-b556-4440-87e5-c2a05478e931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://t.me/bhhub/1204", "content": "Weekly 8 AI & Cyber signals to act on (Jul 13\u201320, 2026)\n\n#AISecurity@bhhub\n\n\u2728 NadMesh industrializes attacks on exposed AI and MCP services\nXLab found a Go botnet combining Shodan harvesting, 20+ exploit paths, polymorphic builds, and persistence to steal cloud keys, Kubernetes tokens, and callable MCP tools. Sensors saw about 139 source IPs/day; the panel\u2019s 3,811-key claim conflicts with other counters, so treat scale cautiously.\n\n\u2728 Mandiant makes AI-assisted vulnerability management enforceable\nThe blueprint treats source code as untrusted agent input and puts deterministic policy before model judgment: isolated workloads, ZDR, short-lived repo-and-branch-bound identities, skill/MCP vetting, and runtime toxic-flow monitoring. Static scanning cannot stop post-deployment exfiltration; guard models cannot replace authorization or sandboxing.\n\n\u2728 Gold Eagle centralizes triage for AI-discovered vulnerabilities\nThe new US clearinghouse links government, AI labs, open-source maintainers, and critical infrastructure to deduplicate model-driven scanning and route fixes. Intake has begun, but no throughput, disclosure-SLA, or remediation metrics are public; performance remains unmeasured.\n\n#AppSec@bhhub\n\n\u2728 Update: a separate SharePoint RCE enters CISA KEV\nCVE-2026-58644 is an unauthenticated deserialization RCE scored 9.8. CISA added it to KEV on July 16 as actively exploited, automatable, and total impact. This is new evidence after the Jul 15 digest\u2019s separate CVE-2026-56164: patch affected on-prem 2016, 2019, and Subscription Edition builds.\n\n\u2728 Harden-Runner blocks undeclared CI egress on macOS and Windows\nVersion 2.20.0 extends egress allowlist enforcement to GitHub-hosted macOS and Windows runners handling Apple provisioning and signing keys. Teams can baseline in audit mode, then block undeclared endpoints so poisoned actions cannot exfiltrate secrets; the artifact is public, though efficacy claims are first-party.\n\n#RedTeam@bhhub\n\n\u2728 UAT-11795 hides resilient C2 behind installers, Telegram, and Polygon\nTalos found trojanized MobaXterm, WebEx, Zoom, DBeaver, and FACEIT installers delivering the new Starland RAT and WLDR memory implant. The actor can load CastleStealer or Remcos, stores fallback C2 in a Polygon contract, and sends beacons to Telegram\u2014two new implants plus durable hunting patterns.\n\n\u2728 Sandworm\u2019s UAC-0145 moves ClickFix infrastructure into smart contracts\nCERT-UA links at least 10 compromised sites, fake CAPTCHA commands, torrents, Signal lures, and counterfeit Android tools to UAC-0145. SMARTAXE selects content per visitor and retrieves its malicious domain from Ethereum before installing GHETTOVIBE; victim scale is undisclosed, but infrastructure can rotate without changing the page.\n\n#BlueTeam@bhhub\n\n\u2728 Microsoft maps two prevalent ACR Stealer chains\nOne ClickFix chain mounts WebDAV content, stages PowerShell/Python, persists by task, and can resolve C2 through blockchain RPC; the other uses MSHTA, JPEG steganography, and reflective execution. Both steal Chromium credentials, DPAPI tokens, and synced files; Microsoft reports increased activity but no victim denominator.", "creation_timestamp": "2026-07-21T00:00:39.747493Z"}, {"uuid": "c20e1810-308f-4eb1-8bb6-027df0022da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-21T16:00:48.360524Z"}, {"uuid": "62a5afb4-6a6f-43e5-beb7-2c5e3acc5ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-monthly-security-update-july-2026", "content": "", "creation_timestamp": "2026-07-21T20:45:02.691547Z"}, {"uuid": "570a1d83-52d3-4ce5-ba7e-13d25c21c60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-22T01:00:43.026182Z"}, {"uuid": "43990406-4b04-4777-b0dc-146be0501086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mrals3c2ua2y", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\n\nLes vuln\u00e9rabilit\u00e9s CVE-2026-50522 et CVE-2026-58644 permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e sur SharePoint et sont activement exploit\u00e9es.\n\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-07-22T15:03:11.420277Z"}, {"uuid": "5c876c05-9fd6-4917-80b2-4e9eb04e4891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/116964235036563174", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLes vuln\u00e9rabilit\u00e9s CVE-2026-50522 et CVE-2026-58644 permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e sur SharePoint et sont activement exploit\u00e9es.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-008/", "creation_timestamp": "2026-07-22T15:03:13.647689Z"}, {"uuid": "e7503b0f-5f62-4838-a2ad-cc87a7facee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mraraez7sp2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58647 \u0432 Microsoft Power BI Report Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/39911054-D795-4BFF-A3B3-782CAB3CB78E", "creation_timestamp": "2026-07-22T16:40:40.345699Z"}, {"uuid": "a4f02f07-2d37-488f-8954-827fe6792839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58640", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarjavwny23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58640: \u0423\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Windows NTFS\n\n\n\nhttps://kripta.biz/posts/E3BFDDB9-488D-456A-B84F-0AB0A2C948DE", "creation_timestamp": "2026-07-22T16:45:37.898088Z"}, {"uuid": "56a53f8e-f0a4-485e-8042-08762d2dc79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mratszsmq42z", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58644 \u0432 Microsoft SharePoint: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/FE156422-5918-4904-8DAB-152BA6D2B53B", "creation_timestamp": "2026-07-22T17:26:53.049438Z"}, {"uuid": "06711ecc-1c17-460a-8331-48477e560141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrattcwfz42v", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05d5\u05d3 \u05e4\u05ea\u05d5\u05d7 \u05de\u05e8\u05d5\u05d7\u05e7 \u05d1-Microsoft SharePoint: \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-58644\n\n\n\nhttps://khesef.xyz/posts/7134AC56-397C-4A48-B7E1-9871FA415796", "creation_timestamp": "2026-07-22T17:27:02.958284Z"}, {"uuid": "cde05fab-d21a-42c0-a5fe-6792efd0a711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mraxj7yjtt2w", "content": "\u26a0\ufe0f EXECUTIVE ALERT: CVE-2026-58644 targets Microsoft SharePoint with critical remote code execution. With active exploitation confirmed, this represents a severe tier-1 enterprise risk. Access our board-ready risk assessment and remediation framework today to secure your infrastructure.\u2026", "creation_timestamp": "2026-07-22T18:32:59.548029Z"}, {"uuid": "41e1c07e-d326-423f-8a4b-e6e0fa8fd54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrc2ecn4ld2c", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 71 interactions\nCVE-2026-60137: 57 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 17 interactions\nCVE-2026-16232: 5 interactions\nCVE-2026-58644: 5 interactions\n", "creation_timestamp": "2026-07-23T04:56:35.435651Z"}, {"uuid": "b1b0dabe-aecd-40c6-90ea-ab57556e2b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://infosec.exchange/users/cert_eu/statuses/116968050524026906", "content": "UPDATE: Critical Vulnerabilities in Microsoft SharePoint (CERT-EU Security Advisory 2026-009)\n[UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Server instances, including CVE-2026-32201, CVE-2026-45659, CVE-2026-56164, and CVE-2026-58644.CERT-EU strongly recommends updating affected servers immediately, rotating credentials for any assets that may have been exposed to the internet, and conducting a compromise assessment.\nhttps://www.cert.europa.eu/publications/security-advisories/2026-009/", "creation_timestamp": "2026-07-23T07:13:31.376479Z"}, {"uuid": "6097df23-3eb0-4da8-a1d9-9a2fc0d05d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116975962821712794", "content": "Still seeing substantial amounts of Microsoft SharePoint unpatched instances that have been added to US CISAKnown Exploited Vulnerability catalog last few weeks. \nThis includes CVE-2026-50522, CVE-2026-56164, CVE-2026-58644 with 878 IPs (1585 FQDNs) unpatched on 2026-07-23\nData for these is shared in our Vulnerable HTTP reporting with the appropriate CVE tags: https://shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nDashboard World Map:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=other_value&day=2026-07-23&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-50522%2B&tag=cve-2026-56164%2B&tag=cve-2026-58644%2B&data_set=count&scale=log&auto_update=on\nDashboard Tree Map: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=other_value&day=2026-07-23&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-50522%2B&tag=cve-2026-56164%2B&tag=cve-2026-58644%2B&data_set=count&scale=log&auto_update=on\nTracker: https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=30&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-50522%2B&tag=cve-2026-56164%2B&tag=cve-2026-58644%2B&dataset=unique_ips&limit=100&group_by=geo&stacking=stacked&auto_update=on\nMS Advisories:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164", "creation_timestamp": "2026-07-24T16:45:46.165795Z"}, {"uuid": "0ff10997-db7d-479e-9b3a-8036148e761d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mrfsm7kii22x", "content": "Still seeing substantial amounts of Microsoft SharePoint unpatched instances that have been added to US CISA Known Exploited Vulnerability (KEV) catalog last few weeks. This includes CVE-2026-50522, CVE-2026-56164, CVE-2026-58644 with 878 IPs (1585 FQDNs) unpatched on 2026-07-23", "creation_timestamp": "2026-07-24T16:48:35.816416Z"}, {"uuid": "be872adc-8fc9-4a56-b2aa-bae3c7795b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mrfsmeybys2x", "content": "Still seeing substantial amounts of Microsoft SharePoint unpatched instances that have been added to US CISA Known Exploited Vulnerability (KEV) catalog last few weeks. This includes CVE-2026-50522, CVE-2026-56164, CVE-2026-58644 with 878 IPs (1585 FQDNs) unpatched on 2026-07-23", "creation_timestamp": "2026-07-24T16:48:37.494199Z"}, {"uuid": "55011f52-5268-468f-80f6-d54ed7e5ffd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mrfsmeycy22x", "content": "Still seeing substantial amounts of Microsoft SharePoint unpatched instances that have been added to US CISA Known Exploited Vulnerability (KEV) catalog last few weeks. This includes CVE-2026-50522, CVE-2026-56164, CVE-2026-58644 with 878 IPs (1585 FQDNs) unpatched on 2026-07-23", "creation_timestamp": "2026-07-24T16:48:39.303611Z"}, {"uuid": "aff68007-3eb3-45e2-bb48-6f8623cbf529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrh2tlntcc24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 75 interactions\nCVE-2026-60137: 57 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 6 interactions\nCVE-2026-56164: 6 interactions\nCVE-2026-58644: 6 interactions\n", "creation_timestamp": "2026-07-25T04:48:26.809362Z"}, {"uuid": "18f31cbc-0256-4281-a7a8-9a4f694648f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrh7sousjy2y", "content": "(CISA TS-SOC) CVE-2026-58644 \u2013 Microsoft SharePoint Deserialization of Untrusted Data\u00a0Vulnerability\n\nSeverity: CRITICAL Impact Summary: An unauthorized attacker can execute code over a network via deserialization of untrusted data....", "creation_timestamp": "2026-07-25T06:17:25.308451Z"}, {"uuid": "094e500b-dc63-4ae4-87a7-aff79f2610e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58647", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mro66x3afb2m", "content": "\ud83d\udccc CVE-2026-58647 - Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing ove... https://www.cyberhub.blog/cves/CVE-2026-58647", "creation_timestamp": "2026-07-28T00:37:07.461298Z"}, {"uuid": "e9d970e6-1c66-4cc4-a2de-fbb7f31cba01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58641", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mumzqyy2e52x", "content": "Drivers: WHCP SBOMs from Mar 2027. SkiaSharp 4.151.2: CVE-2026-58641 SYSTEM EoP; ArmorStart LT 2.002 fixes XSS/DoS. PQC: inventory for 2027 signing. ZIP: short local path. Wi-Fi automation: PowerShell. +4 stories, 1 thread, 2 replies", "creation_timestamp": "2026-09-03T18:00:40.303917Z"}, {"uuid": "edc9524b-a9ff-403b-9b13-810075738338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupuzpnauk2b", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date July 16, 2026\n\nCVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability  \nCVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability  \nCVE-2026-58644 Microsoft SharePoint Deserialization of Untrust...", "creation_timestamp": "2026-09-04T21:14:04.813905Z"}, {"uuid": "439b6858-7276-4402-842f-e8595a9b8cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupvoiy3j22b", "content": "SharePoint\u306e\u65b0\u305f\u306a\u8106\u5f31\u6027\u304c\u3001\u516c\u8868\u5f8c\u307e\u3082\u306a\u304f\u60aa\u7528\u3055\u308c\u308b\n\nCVE-2026-58644\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u30012026\u5e747\u6708\u306eMicrosoft\u306e\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306e\u4e00\u90e8\u3068\u3057\u3066\u4fee\u6b63\u3055\u308c\u305f\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u9006\u30b7\u30ea\u30a2\u30eb\u5316\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u300c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30d9\u30fc\u30b9\u306e\u653b\u6483\u3067\u306f\u3001\u5c11\u306a\u304f\u3068\u3082\u30b5\u30a4\u30c8\u6240\u6709\u8005\u3068\u3057\u3066\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u8a18\u8ff0\u3057\u3066SharePoint\u30b5\u30fc\u30d0\u30fc\u306b\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u3092\u633f\u5165\u304a\u3088\u3073\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u300d\u3068\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306f\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u3001SharePoint...", "creation_timestamp": "2026-09-04T21:25:41.793291Z"}, {"uuid": "100f9eb5-a7ef-4059-b778-f256aebc63b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupw5douy22b", "content": "\u300cSharePoint Server\u300d\u306e\u8907\u6570\u8106\u5f31\u6027\u60aa\u7528\u3067\u5bfe\u7b56\u547c\u3073\u304b\u3051 - \u7c73\u5f53\u5c40\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cSharePoint Server\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u5229\u7528\u8005\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u540c\u88fd\u54c1\u306b\u95a2\u3057\u3066\u3001\u300cCVE-2026-32201\u300d\u300cCVE-2026-45659\u300d\u300cCVE-2026-56164\u300d\u300cCVE-2026-58644\u300d\u306e4\u4ef6\u3092\u6319\u3052\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u307e\u305f\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3082\u306e\u306e\u300cCVE-2026-55040\u300d\u306b\u3064\u3044\u3066\u3082\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u30ea\u30b9\u30af\u304c\u9ad8...", "creation_timestamp": "2026-09-04T21:33:59.845658Z"}, {"uuid": "d1ff9e6e-9a98-464d-9b84-a37cdba5a6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351", "content": "", "creation_timestamp": "2026-09-08T20:18:57.058572Z"}, {"uuid": "d6e2075f-df36-4cc4-ab16-d5cd03bfc0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:01:53.956898Z"}, {"uuid": "4cf19493-c9bc-4f3f-a6a5-df3daaefd1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcomvdc2i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:03:44.882359Z"}, {"uuid": "a0eda56e-df6a-4491-bd6a-2aa1cb1f7fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcomvdd2i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:04:01.478860Z"}, {"uuid": "6fa18e82-14ce-42ec-8b88-f3d3b856c669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcomvde2i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:04:05.057977Z"}, {"uuid": "87d8143e-7121-4472-9f56-bc65ed880064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcoz6v52i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:04:21.082786Z"}, {"uuid": "ca4e59bd-7dde-4a7a-beb6-7b5ff12666cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcnyhz22i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:03:39.408131Z"}, {"uuid": "9ada8a64-db77-4471-a5f8-45db728ff2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcnylw22i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:03:42.161771Z"}, {"uuid": "a317c091-26a7-4863-a090-44386306eef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcoz6v42i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:04:09.006680Z"}, {"uuid": "ed849e79-5906-4209-96e0-121e8614fdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3muzwcpei7n2i", "content": "CVE-2026-58649 0- dotnet watch again, this time an information disclosure which can give away IL or PDB information.", "creation_timestamp": "2026-09-08T21:04:23.905029Z"}, {"uuid": "54c85d60-5d4e-4bc3-b65c-84759aac3902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351", "content": "Microsoft heeft 15 kwetsbaarheden verholpen in diverse Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheid met kenmerk CVE-2026-81376 heeft een CVSS-score van 9,6. Een kwaadwillende misbruiken door een gebruiker ertoe te verleiden een speciaal geprepareerde Visual Studio Code-workspace te openen. Hiermee kunnen de Workspace Trust-beperkingen worden omzeild, waardoor inhoud uit een niet-vertrouwde workspace opdrachten of code kan uitvoeren zonder dat de gebruiker hiervoor eerst toestemming geeft. Hierdoor kan de kwaadwillende toegang krijgen tot lokale gegevens of code uitvoeren met de rechten van de gebruiker.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58649 | 6,50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-81380 | 5,30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-81381 | 6,50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70334 | 7,80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-78461 | 7,40 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-78462 | 8,80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81356 | 8,20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81357 | 8,20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81376 | 9,60 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81377 | 6,50 |                 | \n| CVE-2026-81378 | 8,20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81379 | 8,20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-81383 | 7,40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57099 | 7,50 | Denial-of-Service                   | \n| CVE-2026-69304 | 5,90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n\n------------------- Productgroep Apps ---------------------------------\n\n\nAll CVE's for this product group:\nCVE-2026-58611, CVE-2026-80097\n\nMicrosoft Authenticator: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-80097 | 8,60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nXBox Gaming Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58611 | 7,80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-09-09T04:00:39.323103Z"}, {"uuid": "a7961aa1-dfe8-439a-afd9-844190b99ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:01:43.078431Z"}, {"uuid": "2b5a0ea4-2ee3-488d-8ef4-c929e05689dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T09:15:15.808000Z"}, {"uuid": "0638b49f-417d-4617-a225-ccaa23853883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58649", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv3obyjx342u", "content": "\ud83d\udd17 CVE : CVE-2026-58649, CVE-2026-69304, CVE-2026-69439, CVE-2026-69522, CVE-2026-69806, CVE-2026-71328, CVE-2026-58649, CVE-2026-69304, CVE-2026-69439, CVE-2026-69522, CVE-2026-69806, CVE-2026-71328", "creation_timestamp": "2026-09-09T13:45:20.656890Z"}, {"uuid": "9fd14a2f-2ec8-4b78-9507-0f327846ec03", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58644", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96c995eb-ac1b-4657-8211-6adb872b6e4b", "content": "", "creation_timestamp": "2026-09-10T07:10:25.168338Z"}]}