Blog
The September 2026 Security Update Review
Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:
Adobe Patches for September 2026
For the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.
Here’s this month’s overview table:
Adobe Patches for September 2026
| Bulletin ID | Product | CVE Count | Highest Severity | Highest CVSS | Exploited | Deployment Priority |
|---|---|---|---|---|---|---|
| APSB26-146 | Adobe Commerce | 1 | Critical | 10.0 | Yes | 1 |
| APSB26-142 | Adobe Campaign Classic | 1 | Critical | 10.0 | No | 1 |
| APSB26-119 | Adobe ColdFusion | 9 | Critical | 9.9 | No | 1 |
| APSB26-98 | Adobe Experience Manager | 107 | Critical | 9.9 | No | 2 |
| APSB26-138 | Adobe Commerce | 8 | Critical | 9.3 | No | 2 |
| APSB26-141 | Adobe Acrobat and Reader | 32 | Critical | 8.8 | No | 2 |
| APSB26-130 | Adobe Photoshop | 8 | Critical | 8.6 | No | 3 |
| APSB26-131 | Adobe Illustrator | 3 | Critical | 8.6 | No | 3 |
| APSB26-132 | Adobe Animate | 1 | Critical | 8.2 | No | 3 |
| APSB26-136 | Adobe Photoshop Mobile | 2 | Important | 7.4 | No | 3 |
| TOTAL | 10 bulletins | 172 |
APSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.
Clearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.
Besides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.
Microsoft Patches for September 2026
It’s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that’s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.
To provide a little historical context on how many CVEs have been patched by Microsoft this year, let’s take a look at some year-over-year totals:
On the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits – yet.
As always, we’ll start with the bugs under active attack and move on from there.
- CVE-2026-81963 - Windows Update Stack Elevation of Privilege Vulnerability
This is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.
- CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
This is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don’t know how widespread these exploits may be, so assume they are coming for you and patch quickly.
- CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution Vulnerability
There are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail – no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.
- CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege Vulnerability
This is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.
- CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution Vulnerability
I count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn’t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker’s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.
- CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege Vulnerability
Speaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there’s the user interaction component, but if they succeed, the attacker could gain access to the database at the user’s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.
- CVE-2026-69525 - Remote Desktop Services Remote Code Execution Vulnerability
This CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an “in-network attacker”, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.
So where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable. In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):
CVE-2026-69510 – Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-69524 – Windows Active Directory Domain Services Remote Code Execution Vulnerability
CVE-2026-69530 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-69579 – Windows Message Queuing Remote Code Execution Vulnerability
CVE-2026-69590 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-69595 – Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2026-69730 – Windows DNS Server Remote Code Execution Vulnerability (SigRed’s spiritual successor)
CVE-2026-69858 – Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-72936 – Windows SMB Client Remote Code Execution Vulnerability
CVE-2026-72979 – Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-72981 – IP Helper Remote Code Execution Vulnerability
CVE-2026-72982 – Windows Netlogon Remote Code Execution Vulnerability
CVE-2026-72983 – Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2026-72987 – Windows DNS Remote Code Execution Vulnerability
CVE-2026-73009 – Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2026-73010 – Microsoft Failover Cluster Remote Code Execution Vulnerability
CVE-2026-78444 – Microsoft Failover Cluster Remote Code Execution Vulnerability
CVE-2026-78449 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-78450 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-83997 – Windows Message Queuing Remote Code Execution Vulnerability
Here’s the full list of CVEs released by Microsoft for September 2026:
| CVE | Title | Severity | CVSS | Public | Exploited | Type |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Important | 7.8 | No | Yes | EoP |
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | Important | 7.8 | No | Yes | EoP |
| CVE-2026-70352 ** | Azure AI Language Elevation of Privilege Vulnerability | Critical | 10 | No | No | EoP |
| CVE-2026-69857 ** | Azure Cosmos DB Spoofing Vulnerability | Critical | 8.5 | No | No | Spoofing |
| CVE-2026-80098 ** | Copilot Studio Elevation of Privilege Vulnerability | Critical | 9.3 | No | No | EoP |
| CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-83941 ** | Entra ID Elevation of Privilege Vulnerability | Critical | 9.9 | No | No | EoP |
| CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-73017 | Graphics Kernel Remote Code Execution Vulnerability | Critical | 7.5 | No | No | RCE |
| CVE-2026-58599 | HEVC Video Extensions Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-83711 ** | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | Critical | 10 | No | No | EoP |
| CVE-2026-62906 ** | Microsoft Discovery Studio Information Disclosure Vulnerability | Critical | 7.4 | No | No | Info |
| CVE-2026-65772 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-62916 ** | Microsoft Entra ID Elevation of Privilege Vulnerability | Critical | 9.1 | No | No | EoP |
| CVE-2026-81948 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-81949 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-81950 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-81951 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-81953 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-81959 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-70178 ** | Microsoft Fabric Elevation of Privilege Vulnerability | Critical | 8.5 | No | No | EoP |
| CVE-2026-73010 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-78444 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-78439 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-78520 | Microsoft Office Outlook Information Disclosure Vulnerability | Critical | 6.5 | No | No | Info |
| CVE-2026-78509 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-78519 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | No | No | RCE | |
| CVE-2026-78525 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69678 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69767 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69797 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69285 | Microsoft Office Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69632 | Microsoft Office Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-77898 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.5 | No | No | RCE |
| CVE-2026-78505 | Microsoft Office Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | Critical | 9.6 | No | No | EoP |
| CVE-2026-67378 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.5 | No | No | RCE |
| CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-67636 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.5 | No | No | RCE |
| CVE-2026-67643 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-70351 | Microsoft WebP Image Extension Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-78510 | Microsoft Word Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-81952 | Microsoft Word Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-65818 ** | Power Automate Elevation of Privilege Vulnerability | Critical | 8.5 | No | No | EoP |
| CVE-2026-69649 | Raw Image Extension Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-66302 | Skype for Business Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | Critical | 9 | No | No | EoP |
| CVE-2026-81355 | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Critical | 7.5 | No | No | RCE |
| CVE-2026-81352 | Web Media Extensions Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69874 | Windows ALPC Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-72958 | Windows Credential Guard Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-72987 | Windows DNS Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69813 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-69858 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-72954 | Windows Deployment Services Remote Code Execution Vulnerability | Critical | 7.5 | No | No | RCE |
| CVE-2026-72957 | Windows Deployment Services Remote Code Execution Vulnerability | Critical | 7.8 | No | No | RCE |
| CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69710 | Windows Hello Elevation of Privilege Vulnerability | Critical | 7.5 | No | No | EoP |
| CVE-2026-69725 | Windows Hello Elevation of Privilege Vulnerability | Critical | 7.8 | No | No | EoP |
| CVE-2026-69740 | Windows Hello Elevation of Privilege Vulnerability | Critical | 8.8 | No | No | EoP |
| CVE-2026-69784 | Windows Hello Elevation of Privilege Vulnerability | Critical | 8.8 | No | No | EoP |
| CVE-2026-69799 | Windows Hello Elevation of Privilege Vulnerability | Critical | 7.8 | No | No | EoP |
| CVE-2026-69820 | Windows Hello Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-69864 | Windows Hello Elevation of Privilege Vulnerability | Critical | 7.8 | No | No | EoP |
| CVE-2026-81354 | Windows Hello Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-72980 | Windows Hello Security Feature Bypass Vulnerability | Critical | 4.4 | No | No | SFB |
| CVE-2026-72961 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-69603 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-80083 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69860 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-73023 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-77495 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69676 | Windows Kerberos Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69712 | Windows Key Distribution Center Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-70203 | Windows Media Player Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-72960 | Windows Media Player Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-70586 | Windows Paint Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69530 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-78450 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 8.1 | No | No | RCE |
| CVE-2026-69518 | Windows Remote Desktop Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69852 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 7.5 | No | No | RCE |
| CVE-2026-72950 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-72959 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 8.8 | No | No | RCE |
| CVE-2026-69501 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 7 | No | No | EoP |
| CVE-2026-69846 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-69906 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-83939 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-70585 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 7 | No | No | RCE |
| CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | Critical | 9.8 | No | No | RCE |
| CVE-2026-72962 | Windows USB Video Driver Elevation of Privilege Vulnerability | Critical | 8.2 | No | No | EoP |
| CVE-2026-69890 | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | Critical | 7.5 | No | No | EoP |
| CVE-2026-83498 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical | 7.8 | No | No | EoP |
| CVE-2026-83501 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | Critical | 5.5 | No | No | Info |
| CVE-2026-69805 | .NET Elevation of Privilege Vulnerability | Important | 7.5 | No | No | EoP |
| CVE-2026-69806 | .NET Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-58649 | .NET Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69439 | .NET and Visual Studio Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69522 | .NET and Visual Studio Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-71328 | .NET and Visual Studio Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-57099 | ASP.NET Core Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69304 | ASP.NET Core Denial of Service Vulnerability | Important | 5.9 | No | No | DoS |
| CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | Important | 6.5 | No | No | Tampering |
| CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important | 5.9 | No | No | DoS |
| CVE-2026-69401 | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-62895 | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-77909 | Azure CycleCloud Information Disclosure Vulnerability | Important | 7.7 | No | No | Info |
| CVE-2026-81349 | Azure HDInsight Ambari Elevation of Privilege Vulnerability | Important | 7.2 | No | No | EoP |
| CVE-2026-69329 | BranchCache Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68824 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68847 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69470 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69625 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-81380 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important | 5.3 | No | No | Info |
| CVE-2026-81381 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-81353 | HEIF Image Extensions Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-58600 | HEVC Video Extensions Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68850 | Microsoft Account Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-84003 | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | Important | 7.4 | No | No | Spoofing |
| CVE-2026-80097 | Microsoft Authenticator Elevation of Privilege Vulnerability | Important | 8.6 | No | No | EoP |
| CVE-2026-83948 | Microsoft Azure CLI Remote Code Execution Vulnerability | Important | 8 | No | No | RCE |
| CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-77908 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-81387 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81390 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81391 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81392 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81393 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81394 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81395 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81399 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81400 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81401 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81958 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-81386 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81388 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81389 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7 | No | No | RCE |
| CVE-2026-81396 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81397 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81398 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81947 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81954 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81956 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81957 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-81960 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 8.1 | No | No | EoP |
| CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 9.1 | No | No | EoP |
| CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | Important | 5.9 | No | No | Info |
| CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | Important | 9.3 | No | No | Spoofing |
| CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | Important | 6.5 | No | No | Spoofing |
| CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | Important | 6.5 | No | No | Tampering |
| CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83990 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69594 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69477 | Microsoft Office Access Remote Code Execution Vulnerability | Important | 7.3 | No | No | RCE |
| CVE-2026-69529 | Microsoft Office Access Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69614 | Microsoft Office Access Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69778 | Microsoft Office Access Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-72974 | Microsoft Office Excel Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78515 | Microsoft Office Excel Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-85875 | Microsoft Office Excel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-78518 | Microsoft Office Excel Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69626 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69739 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80076 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80078 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80082 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80087 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80089 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80091 | Microsoft Office Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80073 | Microsoft Office Outlook Information Disclosure Vulnerability | Important | No | No | Info | |
| CVE-2026-80084 | Microsoft Office Outlook Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69629 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-72938 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-72956 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-72975 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-72977 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78513 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-80086 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80081 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Important | No | No | RCE | |
| CVE-2026-69742 | Microsoft Office Publisher Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-81385 | Microsoft Office Publisher Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69442 | Microsoft Office Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78524 | Microsoft Office Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69464 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69716 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 3.5 | No | No | Info |
| CVE-2026-69268 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69273 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69282 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69465 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69724 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69804 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69402 | Microsoft Office SharePoint Spoofing Vulnerability | Important | 7.3 | No | No | Spoofing |
| CVE-2026-69417 | Microsoft Office SharePoint Spoofing Vulnerability | Important | 7.3 | No | No | Spoofing |
| CVE-2026-69615 | Microsoft Office SharePoint Spoofing Vulnerability | Important | 3.5 | No | No | Spoofing |
| CVE-2026-69690 | Microsoft Office SharePoint Spoofing Vulnerability | Important | 4.6 | No | No | Spoofing |
| CVE-2026-64918 | Microsoft Office Spoofing Vulnerability | Important | 6.5 | No | No | Spoofing |
| CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69719 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69734 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-72976 | Microsoft Office Word Information Disclosure Vulnerability | Important | 5 | No | No | Info |
| CVE-2026-77911 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78502 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78503 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78506 | Microsoft Office Word Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-78522 | Microsoft Office Word Information Disclosure Vulnerability | Important | No | No | Info | |
| CVE-2026-80079 | Microsoft Office Word Information Disclosure Vulnerability | Important | No | No | Info | |
| CVE-2026-80088 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-80090 | Microsoft Office Word Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-83949 | Microsoft Office Word Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-83951 | Microsoft Office Word Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69556 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69671 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69686 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69722 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69759 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69764 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-72972 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-72973 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-77901 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78504 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78507 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78511 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78512 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78514 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78517 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78521 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78526 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-80080 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-80085 | Microsoft Office Word Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-77897 | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-62801 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important | 6.5 | No | No | SFB |
| CVE-2026-57098 | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-67633 | Microsoft SQL Server Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-67641 | Microsoft SQL Server Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-66814 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-66818 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-66819 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-67369 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67383 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67386 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67389 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67390 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67393 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67624 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67629 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67630 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67645 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-67648 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68776 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68777 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68778 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68779 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68780 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68781 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68784 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69562 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-73029 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-77488 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-47297 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-67373 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67379 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.5 | No | No | RCE |
| CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67638 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-67642 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-68785 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 4.9 | No | No | RCE |
| CVE-2026-68786 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-68787 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-77482 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-77484 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-77486 | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-66816 | Microsoft SQL Server Security Feature Bypass Vulnerability | Important | 6.5 | No | No | SFB |
| CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-72946 | Microsoft Storage Port Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-65812 | Microsoft Teams for Android Information Disclosure Vulnerability | Important | 6.8 | No | No | Info |
| CVE-2026-69559 | Microsoft Teams for Android Information Disclosure Vulnerability | Important | 5.8 | No | No | Info |
| CVE-2026-56198 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69420 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69427 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important | 4.6 | No | No | Info |
| CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-68896 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69322 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69507 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-62804 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69807 | PowerShell Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 7.1 | No | No | RCE |
| CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-78463 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-80074 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-80077 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68893 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69514 | Remote Desktop Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69536 | Remote Desktop Services Remote Code Execution Vulnerability | Important | 7.1 | No | No | RCE |
| CVE-2026-69539 | Remote Desktop Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69599 | Remote Desktop Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-73028 | SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-77480 | SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-77483 | SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-77485 | SQL Server Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-77487 | SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-78456 | SQL Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-66304 | Skype for Business Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-66306 | Skype for Business Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-63523 | Skype for Business Spoofing Vulnerability | Important | 6.5 | No | No | Spoofing |
| CVE-2026-66305 | Skype for Business Spoofing Vulnerability | Important | 7.1 | No | No | Spoofing |
| CVE-2026-69642 | Skype for Business Spoofing Vulnerability | Important | 6.5 | No | No | Spoofing |
| CVE-2026-69646 | Skype for Business Spoofing Vulnerability | Important | 8.3 | No | No | Spoofing |
| CVE-2026-66303 | Skype for Business and Lync Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-66307 | Skype for Business and Lync Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-66308 | Skype for Business and Lync Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69568 | Storage Spaces Controller Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69384 | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | Important | 7.1 | No | No | DoS |
| CVE-2026-69541 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 7.8 | No | No | EoP |
| CVE-2026-69549 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 7 | No | No | EoP |
| CVE-2026-69611 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 7 | No | No | EoP |
| CVE-2026-69681 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 8 | No | No | EoP |
| CVE-2026-70574 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 7.8 | No | No | EoP |
| CVE-2026-81383 | Visual Studio Code Information Disclosure Vulnerability | Important | 7.4 | No | No | Info |
| CVE-2026-70334 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 7.8 | No | No | SFB |
| CVE-2026-78461 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 7.4 | No | No | SFB |
| CVE-2026-78462 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.8 | No | No | SFB |
| CVE-2026-81356 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.2 | No | No | SFB |
| CVE-2026-81357 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.2 | No | No | SFB |
| CVE-2026-81376 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 9.6 | No | No | SFB |
| CVE-2026-81378 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.2 | No | No | SFB |
| CVE-2026-81379 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.2 | No | No | SFB |
| CVE-2026-81377 | Visual Studio Code Tampering Vulnerability | Important | 6.5 | No | No | Tampering |
| CVE-2026-77906 | Visual Studio Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-77907 | Visual Studio Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69407 | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69418 | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69432 | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72985 | Volume Shadow Copy Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-69609 | Win32k Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69808 | Win32k Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69832 | Win32k Information Disclosure Vulnerability | Important | 5.6 | No | No | Info |
| CVE-2026-69853 | Win32k Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-70290 | Win32k Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-70565 | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69834 | Windows ALPC Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69654 | Windows Accounts Control Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69816 | Windows Accounts Control Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69809 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-70342 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 8.1 | No | No | EoP |
| CVE-2026-69311 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69394 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69447 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69540 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69604 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69692 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69801 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70562 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-73005 | Windows Authentication Methods Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-73004 | Windows Autopilot Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-68825 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69293 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69298 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69323 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69352 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69476 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69489 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69580 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69583 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69589 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69593 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69727 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69738 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69773 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69787 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69826 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-70572 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70573 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-70581 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72941 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72988 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72990 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72991 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72992 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72993 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72994 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72995 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72996 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72997 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73000 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73001 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73002 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73007 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73011 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73015 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73020 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73021 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73026 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-77489 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78447 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78448 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83954 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83955 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83967 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83968 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83969 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83970 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83971 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83972 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83973 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83974 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83975 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83976 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83977 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83978 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83979 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83980 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83981 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83982 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83983 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83985 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83986 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83987 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83988 | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-73008 | Windows Biometric Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69458 | Windows BitLocker Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69449 | Windows BitLocker Remote Code Execution Vulnerability | Important | 6.7 | No | No | RCE |
| CVE-2026-69817 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68849 | Windows Bluetooth Port Driver Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-69388 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69398 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69448 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69889 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-77892 | Windows Boot Manager Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-69735 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69391 | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69283 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69561 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78454 | Windows CD-ROM Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure Vulnerability | Important | 4.6 | No | No | Info |
| CVE-2026-69542 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-80093 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-83991 | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-69445 | Windows Compressed Folder Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70019 | Windows Compressed Folder Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69267 | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69771 | Windows Container Manager Service Security Feature Bypass Vulnerability | Important | 4.7 | No | No | SFB |
| CVE-2026-70583 | Windows Core Messaging Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70584 | Windows Core Messaging Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70578 | Windows Credential Guard Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69790 | Windows Credential Providers Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69814 | Windows Credential Providers Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69729 | Windows Credential Providers Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69284 | Windows DCOM Server Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69781 | Windows DHCP Client Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69777 | Windows DHCP Client Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69342 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69405 | Windows DHCP Server Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-69416 | Windows DHCP Server Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-69497 | Windows DHCP Server Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69637 | Windows DHCP Server Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-69679 | Windows DHCP Server Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-70065 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77494 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77498 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77499 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77501 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77502 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77886 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77888 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77889 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77890 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77893 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-77895 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69415 | Windows DHCP Server Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-69297 | Windows DHCP Server Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69803 | Windows DHCP Server Information Disclosure Vulnerability | Important | 5.9 | No | No | Info |
| CVE-2026-69929 | Windows DHCP Server Information Disclosure Vulnerability | Important | 5.9 | No | No | Info |
| CVE-2026-69930 | Windows DHCP Server Information Disclosure Vulnerability | Important | 5.9 | No | No | Info |
| CVE-2026-70124 | Windows DHCP Server Information Disclosure Vulnerability | Important | 5.9 | No | No | Info |
| CVE-2026-69266 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69412 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8 | No | No | RCE |
| CVE-2026-69510 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69547 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69620 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69847 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8 | No | No | RCE |
| CVE-2026-69876 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 8 | No | No | RCE |
| CVE-2026-69878 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 6.4 | No | No | RCE |
| CVE-2026-77887 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 6.4 | No | No | RCE |
| CVE-2026-77891 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 6.4 | No | No | RCE |
| CVE-2026-69631 | Windows DNS Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-70091 | Windows DNS Denial of Service Vulnerability | Important | 5.9 | No | No | DoS |
| CVE-2026-69310 | Windows DNS Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72948 | Windows DNS Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-69369 | Windows DNS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69672 | Windows DNS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-78523 | Windows DNS Server Denial of Service Vulnerability | Important | 5.9 | No | No | DoS |
| CVE-2026-69551 | Windows DNS Server Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-72928 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69680 | Windows DNS Spoofing Vulnerability | Important | 8.1 | No | No | Spoofing |
| CVE-2026-69775 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-70568 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68831 | Windows Defender Firewall Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69607 | Windows Deployment Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-72943 | Windows Deployment Services Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69314 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69693 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69296 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69478 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69488 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69574 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69581 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69711 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69714 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69791 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69866 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-77500 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83940 | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69443 | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-69472 | Windows Devices Human Interface Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-70567 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-78446 | Windows Distributed File System (DFS) Denial of Service Vulnerability | Important | 5.3 | No | No | DoS |
| CVE-2026-69424 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69430 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69688 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69841 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69794 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69481 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68894 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69362 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69433 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69436 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69450 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69462 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69513 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69612 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69896 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-83996 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69684 | Windows Error Reporting Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69482 | Windows Error Reporting Tampering Vulnerability | Important | 7.1 | No | No | Tampering |
| CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69494 | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69495 | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-71338 | Windows Failover Cluster Elevation of Privilege Vulnerability | Important | 6.4 | No | No | EoP |
| CVE-2026-72989 | Windows Failover Cluster Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-68878 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69347 | Windows Fast FAT Driver Remote Code Execution Vulnerability | Important | 7.4 | No | No | RCE |
| CVE-2026-68837 | Windows File History Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71340 | Windows File History Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72947 | Windows File History Service Elevation of Privilege Vulnerability | Important | 6.4 | No | No | EoP |
| CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-68827 | Windows GDI+ Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69288 | Windows GDI+ Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69717 | Windows Group Policy Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69623 | Windows HTTP Print Provider Remote Code Execution Vulnerability | Important | 8 | No | No | RCE |
| CVE-2026-69597 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69682 | Windows Host Guardian Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69553 | Windows Hyper-V Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69694 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69341 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69500 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69613 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69483 | Windows Image Acquisition Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-69318 | Windows Imaging Component Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-83992 | Windows Imaging Component Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-62694 | Windows Installer Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69441 | Windows Installer Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71339 | Windows Installer Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-72929 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-77894 | Windows Installer Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72926 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72964 | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-69587 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69881 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69429 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69744 | Windows Kerberos Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69760 | Windows Kerberos Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69685 | Windows Kerberos Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69822 | Windows Kerberos Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68846 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68884 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69366 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69466 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69473 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69578 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-83942 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-85360 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69406 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69723 | Windows Kernel Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69421 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-84001 | Windows Key Distribution Center Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69281 | Windows License Manager Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69315 | Windows License Manager Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69732 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69440 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69508 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69720 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78464 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68842 | Windows MIDI Service Module Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69339 | Windows MIDI Service Module Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69451 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-70582 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 6.4 | No | No | EoP |
| CVE-2026-77905 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69349 | Windows Management Instrumentation Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-73012 | Windows Management Services Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69891 | Windows Media Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69645 | Windows Message Queuing Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68887 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-72932 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-83997 | Windows Message Queuing Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-70579 | Windows Mobile Broadband Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-69377 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69460 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-70577 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-73003 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-73022 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69674 | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | Important | 5.5 | No | No | SFB |
| CVE-2026-72963 | Windows Modern Execution Server Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69357 | Windows NDIS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69396 | Windows NDIS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-71334 | Windows NFS Portmapper Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68832 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68834 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-68838 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-68841 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69265 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69312 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69332 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69340 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69379 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69505 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69532 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69567 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69875 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-72935 | Windows NTFS Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-77503 | Windows NTFS Elevation of Privilege Vulnerability | Important | 8.4 | No | No | EoP |
| CVE-2026-83995 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68851 | Windows NTFS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69504 | Windows NTFS Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69591 | Windows NTFS Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-68833 | Windows NTFS Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-68875 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69461 | Windows NTFS Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69479 | Windows NTFS Remote Code Execution Vulnerability | Important | 8.4 | No | No | RCE |
| CVE-2026-69566 | Windows NTFS Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-69638 | Windows NTFS Remote Code Execution Vulnerability | Important | 8.4 | No | No | RCE |
| CVE-2026-69709 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-71329 | Windows NTFS Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-69425 | Windows NTFS Tampering Vulnerability | Important | 4.7 | No | No | Tampering |
| CVE-2026-62759 | Windows Netlogon Spoofing Vulnerability | Important | 7.5 | No | No | Spoofing |
| CVE-2026-72967 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68886 | Windows Network Connection Broker Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69372 | Windows Network File System Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-69772 | Windows Network File System Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69648 | Windows Notification Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-78441 | Windows OLE DB Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-78442 | Windows OLE DB Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69350 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-69368 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69371 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69373 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-69316 | Windows Overlay Filter Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-69343 | Windows Overlay Filter Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69474 | Windows Overlay Filter Information Disclosure Vulnerability | Important | 4.8 | No | No | Info |
| CVE-2026-69480 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69492 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71341 | Windows Partition Management Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69324 | Windows Performance Monitor Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69459 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69321 | Windows Power Dependency Coordinator Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-69569 | Windows Print Spooler Components Denial of Service Vulnerability | Important | 5.7 | No | No | DoS |
| CVE-2026-68835 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68848 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69309 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69346 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69364 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69838 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69921 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70564 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69344 | Windows Print Spooler Components Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69552 | Windows Print Spooler Components Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-85877 | Windows Print Spooler Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69602 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-68845 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68876 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69534 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69563 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68873 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-68874 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-62697 | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69280 | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69300 | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69548 | Windows RNDIS Information Disclosure Vulnerability | Important | 4.6 | No | No | Info |
| CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69337 | Windows Registry Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69331 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69455 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-71333 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71342 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71343 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-71352 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-72966 | Windows Remote Access Connection Manager Tampering Vulnerability | Important | 5.5 | No | No | Tampering |
| CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-69627 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-70587 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-69287 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69475 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-80096 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 8.8 | No | No | EoP |
| CVE-2026-69616 | Windows Remote Desktop Services Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-83999 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69617 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-83952 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-72939 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-71351 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71353 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-70570 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important | 7.5 | No | No | RCE |
| CVE-2026-69544 | Windows SMB Client Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69572 | Windows SMB Client Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-69618 | Windows SMB Client Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-72936 | Windows SMB Client Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69374 | Windows SMB Server Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69403 | Windows SMB Server Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-72949 | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-70575 | Windows Schannel Denial of Service Vulnerability | Important | 5.3 | No | No | DoS |
| CVE-2026-72940 | Windows Schannel Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69713 | Windows Secure Boot Security Feature Bypass Vulnerability | Important | 4.4 | No | No | SFB |
| CVE-2026-72931 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | Important | 4.7 | No | No | DoS |
| CVE-2026-71332 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72930 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Important | 7 | No | No | RCE |
| CVE-2026-77899 | Windows Security Center Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-78457 | Windows Security Health Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-56177 | Windows Server Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-83989 | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-73024 | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-71330 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | Important | 7.5 | No | No | Info |
| CVE-2026-69289 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69383 | Windows Shell Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69392 | Windows Shell Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69528 | Windows Shell Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69606 | Windows Shell Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-70563 | Windows Shell Spoofing Vulnerability | Important | 8.1 | No | No | Spoofing |
| CVE-2026-69785 | Windows Smart Card Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69512 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69535 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69643 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69691 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70569 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69390 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69393 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 5.7 | No | No | Info |
| CVE-2026-69741 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69770 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69895 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 4.7 | No | No | Info |
| CVE-2026-72942 | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 6.5 | No | No | Info |
| CVE-2026-69538 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-71345 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-71348 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-71349 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-71350 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 6.8 | No | No | RCE |
| CVE-2026-72952 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 7 | No | No | RCE |
| CVE-2026-69328 | Windows Storage Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78516 | Windows Storage Information Disclosure Vulnerability | Important | 4.3 | No | No | Info |
| CVE-2026-69389 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-71337 | Windows Storage Management Provider Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69381 | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 4.6 | No | No | Info |
| CVE-2026-72937 | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-77492 | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69290 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69575 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68844 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-68877 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69588 | Windows TCP/IP Denial of Service Vulnerability | Important | 7.5 | No | No | DoS |
| CVE-2026-69385 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69404 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69757 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69761 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69793 | Windows TCP/IP Security Feature Bypass Vulnerability | Important | 7.5 | No | No | SFB |
| CVE-2026-72945 | Windows Task Scheduler Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69353 | Windows Text Shaping Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69786 | Windows Text Shaping Remote Code Execution Vulnerability | Important | 8.1 | No | No | RCE |
| CVE-2026-69434 | Windows URL Moniker Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-73019 | Windows URL Moniker Security Feature Bypass Vulnerability | Important | 4.3 | No | No | SFB |
| CVE-2026-69286 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69469 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 6.6 | No | No | EoP |
| CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69687 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69707 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69859 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-68840 | Windows USB Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69295 | Windows USB Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69503 | Windows USB Driver Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-72953 | Windows USB Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69457 | Windows USB Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-72999 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-69490 | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | Important | 6.8 | No | No | EoP |
| CVE-2026-69527 | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Important | 9.8 | No | No | RCE |
| CVE-2026-69319 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69422 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69423 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69584 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69573 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69592 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69758 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-68830 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69351 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-56172 | Windows VHD miniport driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69426 | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | Important | 7.8 | No | No | RCE |
| CVE-2026-69468 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69582 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-77904 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69291 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69334 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69708 | Windows Web Platform Storage Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-72965 | Windows WebClient Service Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69792 | Windows Win32K Security Feature Bypass Vulnerability | Important | 4.7 | No | No | SFB |
| CVE-2026-68880 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69274 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69301 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69333 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69335 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69348 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69410 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69498 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69610 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69630 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69652 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69689 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69706 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.1 | No | No | EoP |
| CVE-2026-69762 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-69779 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69818 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69844 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-70283 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-70289 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69517 | Windows Wireless Networking Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-69862 | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | Important | 5.5 | No | No | Info |
| CVE-2026-69560 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7 | No | No | EoP |
| CVE-2026-71336 | Windows Work Folder Service Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-80075 | Windows Work Folders Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-69619 | Windows exFAT File System Elevation of Privilege Vulnerability | Important | 8 | No | No | EoP |
| CVE-2026-68898 | Windows iSCSI Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-69598 | Windows iSCSI Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-69628 | Windows iSCSI Remote Code Execution Vulnerability | Important | 8.8 | No | No | RCE |
| CVE-2026-73025 | Windows iSCSI Security Feature Bypass Vulnerability | Important | 9.8 | No | No | SFB |
| CVE-2026-69839 | Windows iSCSI Target Service Denial of Service Vulnerability | Important | 6.5 | No | No | DoS |
| CVE-2026-72927 | Winsock Elevation of Privilege Vulnerability | Important | 6.7 | No | No | EoP |
| CVE-2026-58611 | Xbox Gaming Services Elevation of Privilege Vulnerability | Important | 7.8 | No | No | EoP |
| CVE-2026-78455 | Xbox Information Disclosure Vulnerability | Important | 4.3 | No | No | Info |
| CVE-2026-84353 * | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups | Critical | N/A | No | No | RCE |
| CVE-2026-84324 * | Chromium: CVE-2026-84324 Use after free in Proxy | High | N/A | No | No | RCE |
| CVE-2026-84325 * | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | High | N/A | No | No | RCE |
| CVE-2026-84326 * | Chromium: CVE-2026-84326 Uninitialized resource in V8 | High | N/A | No | No | RCE |
| CVE-2026-84359 * | Chromium: CVE-2026-84359 Information leak in Skia | High | N/A | No | No | Info |
| CVE-2026-84357 * | Chromium: CVE-2026-84357 Improper input validation in Omnibox | High | N/A | No | No | RCE |
| CVE-2026-84349 * | Chromium: CVE-2026-84349 Use after free in Browser | High | N/A | No | No | RCE |
| CVE-2026-84351 * | Chromium: CVE-2026-84351 Buffer overflow in GPU | High | N/A | No | No | RCE |
| CVE-2026-84354 * | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | High | N/A | No | No | RCE |
| CVE-2026-84323 * | Chromium: CVE-2026-84323 Missing authorization in FileSystem | Medium | N/A | No | No | RCE |
| CVE-2026-84328 * | Chromium: CVE-2026-84328 Missing authorization in FileSystem | Medium | N/A | No | No | RCE |
| CVE-2026-84332 * | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | Medium | N/A | No | No | RCE |
| CVE-2026-84334 * | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | Medium | N/A | No | No | EoP |
| CVE-2026-84335 * | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | Medium | N/A | No | No | EoP |
| CVE-2026-84347 * | Chromium: CVE-2026-84347 Use after free in WebRTC | Medium | N/A | No | No | RCE |
| CVE-2026-84348 * | Chromium: CVE-2026-84348 Information leak in MediaCapture | Medium | N/A | No | No | Info |
| CVE-2026-84355 * | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | Medium | N/A | No | No | EoP |
| CVE-2026-84358 * | Chromium: CVE-2026-84358 Improper privilege management in Downloads | Medium | N/A | No | No | EoP |
| CVE-2026-84327 * | Chromium: CVE-2026-84327 Incorrect authorization in Autofill | Low | N/A | No | No | Spoofing |
| CVE-2026-84329 * | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | Low | N/A | No | No | EoP |
| CVE-2026-84331 * | Chromium: CVE-2026-84331 Incorrect authorization in Actor | Low | N/A | No | No | SFB |
| CVE-2026-84350 * | Chromium: CVE-2026-84350 Use after free in TabStrip | Low | N/A | No | No | RCE |
| CVE-2026-84356 * | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | Low | N/A | No | No | Spoofing |
* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.
** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.
† Indicates further administrative actions are required to fully address the vulnerability.
As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.
There are roughly 90+ Critical rated bug remaining, and I’ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They’ve already been patched by Microsoft, so there’s no action for you. But don’t ignore the EoP in Spring Cloud Azure. It’s a complex scenario, but Microsoft still lists it as exploitation more likely. There’s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?).
From here on out, I’ll try to break things down by component rather than severity rating or impact. It may make it easier. We’ll see. ¯\_(ツ)_/¯
Windows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn’t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.
Windows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads “elevate privileges over a network” rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.
Windows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.
Exchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.
Microsoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook’s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word.
SharePoint Server: This month’s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above “Exploitation Less Likely”, but given SharePoint's recent history of “Less Likely” becoming “in the KEV catalog,” the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.
Microsoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here’s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378’s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.
Windows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server’s record handling: another single-component sweep, but this one lands on domain controllers. We’ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two “More Likely” unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.
Windows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague “in-network attacker calling arbitrary endpoints” phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where “requires physical access” describes every USB port in the building.
The USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic “in-network attacker calling arbitrary endpoints” boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.
Kerberos and the KDC: Six different bugs affect these components, but it’s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC — two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. “The server” here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them.
Exploitation More Likely: If you prioritize by Microsoft’s Exploit Index (XI), which I don’t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.
The Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).
No new advisories are being released this month.
Looking Ahead
The next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!