September 2026 Microsoft Patch Tuesday
This month, Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the previous high of 664 set in July 2026. Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include Windows privilege escalation and critical RCEs in Skype for Business, MSMQ and RRAS.
A few vulnerabilities worth mentioning:
Windows Update Stack Elevation of Privilege Vulnerability (CVE-2026-81963)
Microsoft reports that CVE-2026-81963 is being exploited, though it was not publicly disclosed before Patch Tuesday. This Important-severity Windows Update Stack elevation of privilege vulnerability has a CVSS score of 7.8 and affects Windows 11 and Windows Server 2025 systems. The flaw involves improper link resolution before file access, allowing a local, authenticated attacker with low privileges to abuse link-following behavior and elevate to SYSTEM privileges. Administrators should prioritize applying the Windows security updates for affected Windows 11 and Windows Server 2025 systems, including Server Core installations.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVE-2026-85880)
Microsoft lists CVE-2026-85880 as exploited in the wild, although it was not publicly disclosed before Patch Tuesday and is not currently in CISA’s Known Exploited Vulnerabilities catalogue. This Important-severity Windows ALPC elevation of privilege vulnerability has a CVSS score of 7.8 and affects Windows 10 and multiple Windows Server releases, including Server 2012, 2016, 2019, and 2022. The flaw is a heap-based buffer overflow that can be exploited locally by an attacker who can run code in a low-privilege AppContainer; no user interaction is required. Successful exploitation allows the attacker to escape the sandbox and gain SYSTEM privileges on the affected host. Given Microsoft’s exploited-in-the-wild assessment, prioritize deployment of the applicable Windows security updates, especially on multi-user systems, exposed workstations, and servers where local code execution paths are available.
Skype for Business Remote Code Execution Vulnerability (CVE-2026-66302)
Microsoft reports that CVE-2026-66302 is not being exploited in the wild and was not publicly disclosed before Patch Tuesday. This is a Critical remote code execution vulnerability in Skype for Business Server with a CVSS score of 9.8, affecting Skype for Business Server 2015 CU13, Skype for Business Server 2019 CU8, and Skype for Business Server Subscription Edition CU1. The flaw involves external control of a file name or path, allowing an unauthenticated attacker to send a specially crafted network request that writes an attacker-controlled file to an arbitrary location on the affected server; successful exploitation could allow code execution on the target server without authentication or user interaction. Administrators should prioritize applying Microsoft’s updates for affected Skype for Business Server installations and review exposed deployments, logging, and access controls for signs of suspicious file writes or unexpected server-side code execution.
Windows Message Queuing Remote Code Execution Vulnerability (CVE-2026-69579)
Microsoft reports that CVE-2026-69579 is not known to be exploited in the wild and was not publicly disclosed before Patch Tuesday. This Critical remote code execution vulnerability carries a CVSS score of 9.8 and is a use-after-free flaw in Windows Message Queuing affecting supported Windows client and server releases. An unauthenticated attacker could exploit it remotely by sending a specially crafted packet to an affected Message Queuing service, with no user interaction required, potentially allowing code execution on the target system with high impact to confidentiality, integrity, and availability. Systems running MSMQ should be prioritized for patching; where Message Queuing is not needed, disabling the service or restricting network access to it, including limiting exposure of MSMQ traffic such as TCP port 1801, can reduce risk until updates are applied.
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVE-2026-69590)
CVE-2026-69590 is not listed by Microsoft as exploited in the wild and has not been publicly disclosed; it is a Critical remote code execution vulnerability in Windows RRAS with a CVSS score of 9.8. An unauthenticated remote attacker could exploit the flaw by sending a specially crafted packet to an affected RRAS service over the network, with no user interaction required, potentially allowing code execution on the target system with serious confidentiality, integrity, and availability impact. Affected platforms include supported Windows 10, Windows 11, and Windows Server releases. Organizations should apply the Microsoft security update promptly, especially on systems running RRAS, and reduce exposure by disabling RRAS where it is not needed, restricting network access to the service with firewalls or VPN controls, and monitoring for unexpected traffic to RRAS-enabled hosts.
This was a summary of Microsoft’s monthly updates highlighting key vulnerabilities. Prioritize the exploited Important Windows EOP flaws, CVE-2026-81963 and CVE-2026-85880, then patch exposed Skype for Business, MSMQ, and RRAS systems vulnerable to Critical unauthenticated RCE.
A detailed list of this month's vulnerabilities follows below. To search and filter them, visit my dashboard: https://patchlens.io
| Description | |||||||
|---|---|---|---|---|---|---|---|
| CVE | Disclosed | Exploited | Exploitability (old versions) | current version | Severity | CVSS Base (AVG) | CVSS Temporal (AVG) |
| .NET Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69805 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69806 | No | No | - | - | Important | 7.0 | 6.1 |
| .NET Information Disclosure Vulnerability | |||||||
| CVE-2026-58649 | No | No | - | - | Important | 6.5 | 5.7 |
| .NET and Visual Studio Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69439 | No | No | - | - | Important | 8.8 | 7.7 |
| .NET and Visual Studio Remote Code Execution Vulnerability | |||||||
| CVE-2026-69522 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-71328 | No | No | - | - | Important | 8.8 | 7.7 |
| ASP.NET Core Denial of Service Vulnerability | |||||||
| CVE-2026-57099 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69304 | No | No | - | - | Important | 5.9 | 5.2 |
| Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62810 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69821 | No | No | - | - | Important | 7.8 | 6.8 |
| Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | |||||||
| CVE-2026-69395 | No | No | - | - | Important | 6.5 | 5.7 |
| Active Directory Certificate Services (AD CS) Tampering Vulnerability | |||||||
| CVE-2026-69624 | No | No | - | - | Important | 6.5 | 5.7 |
| Active Directory Domain Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69359 | No | No | - | - | Important | 7.8 | 6.8 |
| Active Directory Federation Services (AD FS) Denial of Service Vulnerability | |||||||
| CVE-2026-72978 | No | No | - | - | Important | 5.9 | 5.2 |
| Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69401 | No | No | - | - | Important | 7.0 | 6.1 |
| Azure AI Language Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-70352 | No | No | - | - | Critical | 10.0 | 8.7 |
| Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62895 | No | No | - | - | Important | 8.8 | 7.7 |
| Azure Cosmos DB Spoofing Vulnerability (no customer action required) |
|||||||
| CVE-2026-69857 | No | No | - | - | Critical | 8.5 | 7.4 |
| Azure CycleCloud Information Disclosure Vulnerability | |||||||
| CVE-2026-77909 | No | No | - | - | Important | 7.7 | 6.7 |
| Azure HDInsight Ambari Elevation of Privilege Vulnerability | |||||||
| CVE-2026-81349 | No | No | - | - | Important | 7.2 | 6.5 |
| BranchCache Denial of Service Vulnerability | |||||||
| CVE-2026-69329 | No | No | - | - | Important | 7.5 | 6.5 |
| Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69516 | No | No | - | - | Important | 7.0 | 6.1 |
| Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68824 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-68847 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69470 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69625 | No | No | - | - | Important | 8.0 | 7.0 |
| Copilot Studio Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-80098 | No | No | - | - | Critical | 9.3 | 8.1 |
| Data Sharing Service Client Elevation of Privilege Vulnerability | |||||||
| CVE-2026-73014 | No | No | - | - | Important | 7.8 | 6.8 |
| DirectWrite Remote Code Execution Vulnerability | |||||||
| CVE-2026-73006 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-73016 | No | No | - | - | Important | 8.8 | 7.7 |
| Entra ID Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-83941 | No | No | - | - | Critical | 9.9 | 8.6 |
| GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | |||||||
| CVE-2026-81380 | No | No | - | - | Important | 5.3 | 4.6 |
| CVE-2026-81381 | No | No | - | - | Important | 6.5 | 5.7 |
| Graphic Fonts Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69576 | No | No | - | - | Important | 7.8 | 6.8 |
| Graphic Fonts Remote Code Execution Vulnerability | |||||||
| CVE-2026-72986 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-73018 | No | No | - | - | Critical | 8.8 | 7.7 |
| Graphics Kernel Remote Code Execution Vulnerability | |||||||
| CVE-2026-73017 | No | No | - | - | Critical | 7.5 | 6.5 |
| HEIF Image Extensions Remote Code Execution Vulnerability | |||||||
| CVE-2026-81353 | No | No | - | - | Important | 7.8 | 6.8 |
| HEVC Video Extensions Elevation of Privilege Vulnerability | |||||||
| CVE-2026-58600 | No | No | - | - | Important | 7.8 | 6.8 |
| HEVC Video Extensions Remote Code Execution Vulnerability | |||||||
| CVE-2026-58599 | No | No | - | - | Critical | 7.8 | 6.8 |
| HID Class Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69731 | No | No | - | - | Important | 7.8 | 6.8 |
| IP Helper Remote Code Execution Vulnerability | |||||||
| CVE-2026-72981 | No | No | - | - | Critical | 8.1 | 7.1 |
| Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | |||||||
| CVE-2026-72983 | No | No | - | - | Critical | 9.8 | 8.5 |
| Internet Storage Name Service Information Disclosure Vulnerability | |||||||
| CVE-2026-68895 | No | No | - | - | Important | 5.5 | 4.8 |
| Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69275 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69900 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Account Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68850 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Account Information Disclosure Vulnerability | |||||||
| CVE-2026-68852 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | |||||||
| CVE-2026-84003 | No | No | - | - | Important | 7.4 | 6.4 |
| Microsoft Authenticator Elevation of Privilege Vulnerability | |||||||
| CVE-2026-80097 | No | No | - | - | Important | 8.6 | 7.5 |
| Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-83711 | No | No | - | - | Critical | 10.0 | 8.7 |
| Microsoft Azure CLI Remote Code Execution Vulnerability | |||||||
| CVE-2026-83948 | No | No | - | - | Important | 8.0 | 7.0 |
| Microsoft COM for Windows Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69299 | No | No | - | - | Important | 7.0 | 6.1 |
| Microsoft COM for Windows Information Disclosure Vulnerability | |||||||
| CVE-2026-69294 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft DirectMusic Remote Code Execution Vulnerability | |||||||
| CVE-2026-69491 | No | No | - | - | Important | 9.8 | 8.5 |
| Microsoft Discovery Studio Information Disclosure Vulnerability (no customer action required) |
|||||||
| CVE-2026-62906 | No | No | - | - | Critical | 7.4 | 6.4 |
| Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | |||||||
| CVE-2026-65772 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-77908 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Entra ID Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-62916 | No | No | - | - | Critical | 9.1 | 7.9 |
| Microsoft Excel Information Disclosure Vulnerability | |||||||
| CVE-2026-81387 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81390 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81391 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81392 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81393 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81394 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81395 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81399 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81400 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81401 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-81958 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Excel Remote Code Execution Vulnerability | |||||||
| CVE-2026-81386 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81388 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81389 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-81396 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81397 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81398 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81947 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81948 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81949 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81950 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81951 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81953 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81954 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81956 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81957 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-81959 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81960 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Exchange Server Denial of Service Vulnerability | |||||||
| CVE-2026-69378 | No | No | - | - | Important | 7.5 | 6.5 |
| Microsoft Exchange Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69380 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69641 | No | No | - | - | Important | 9.1 | 7.9 |
| Microsoft Exchange Server Information Disclosure Vulnerability | |||||||
| CVE-2026-69382 | No | No | - | - | Important | 5.9 | 5.2 |
| Microsoft Exchange Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-55007 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69355 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Exchange Server Spoofing Vulnerability | |||||||
| CVE-2026-69356 | No | No | - | - | Important | 9.3 | 8.1 |
| CVE-2026-69361 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Exchange Server Tampering Vulnerability | |||||||
| CVE-2026-69375 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Fabric Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-70178 | No | No | - | - | Critical | 8.5 | 7.4 |
| Microsoft Failover Cluster Remote Code Execution Vulnerability | |||||||
| CVE-2026-73010 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-78444 | No | No | - | - | Critical | 8.1 | 7.1 |
| Microsoft Graphics Component Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69467 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83990 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Graphics Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-84000 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Install Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69605 | No | No | - | - | Important | 7.0 | 6.1 |
| Microsoft JScript Remote Code Execution Vulnerability | |||||||
| CVE-2026-69325 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69438 | No | No | - | - | Important | 8.1 | 7.1 |
| Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69277 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69365 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69594 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Office Access Remote Code Execution Vulnerability | |||||||
| CVE-2026-69477 | No | No | - | - | Important | 7.3 | 6.4 |
| CVE-2026-69529 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69614 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69778 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office Excel Information Disclosure Vulnerability | |||||||
| CVE-2026-72974 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-78515 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-85875 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Office Excel Remote Code Execution Vulnerability | |||||||
| CVE-2026-78518 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office Graphics Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-78439 | No | No | - | - | Critical | 8.8 | 7.7 |
| Microsoft Office Information Disclosure Vulnerability | |||||||
| CVE-2026-69626 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69739 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80076 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80078 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80082 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80087 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80089 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80091 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Office Outlook Information Disclosure Vulnerability | |||||||
| CVE-2026-78520 | No | No | - | - | Critical | 6.5 | 5.7 |
| CVE-2026-80073 | No | No | - | - | Important | ||
| CVE-2026-80084 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Office Outlook Remote Code Execution Vulnerability | |||||||
| CVE-2026-69629 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78509 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-78519 | No | No | - | - | Critical | ||
| CVE-2026-78525 | No | No | - | - | Critical | 8.8 | 7.7 |
| Microsoft Office PowerPoint Information Disclosure Vulnerability | |||||||
| CVE-2026-72938 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-72956 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-72975 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-72977 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-78513 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-80086 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Office PowerPoint Remote Code Execution Vulnerability | |||||||
| CVE-2026-69678 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69767 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69797 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-80081 | No | No | - | - | Important | ||
| Microsoft Office Publisher Remote Code Execution Vulnerability | |||||||
| CVE-2026-69742 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-81385 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office Remote Code Execution Vulnerability | |||||||
| CVE-2026-69285 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69442 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69632 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-77898 | No | No | - | - | Critical | 7.5 | 6.5 |
| CVE-2026-78505 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-78524 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office SharePoint Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69464 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69716 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office SharePoint Information Disclosure Vulnerability | |||||||
| CVE-2026-69409 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69636 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69683 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69904 | No | No | - | - | Important | 3.5 | 3.1 |
| Microsoft Office SharePoint Remote Code Execution Vulnerability | |||||||
| CVE-2026-69268 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69273 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69282 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69465 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69724 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69804 | No | No | - | - | Important | 7.5 | 6.5 |
| Microsoft Office SharePoint Spoofing Vulnerability | |||||||
| CVE-2026-69402 | No | No | - | - | Important | 7.3 | 6.4 |
| CVE-2026-69417 | No | No | - | - | Important | 7.3 | 6.4 |
| CVE-2026-69615 | No | No | - | - | Important | 3.5 | 3.1 |
| CVE-2026-69690 | No | No | - | - | Important | 4.6 | 4.0 |
| Microsoft Office Spoofing Vulnerability | |||||||
| CVE-2026-64918 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Office Word Information Disclosure Vulnerability | |||||||
| CVE-2026-68843 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69719 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69734 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-72976 | No | No | - | - | Important | 5.0 | 4.4 |
| CVE-2026-77911 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-78502 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-78503 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-78506 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-78522 | No | No | - | - | Important | ||
| CVE-2026-80079 | No | No | - | - | Important | ||
| CVE-2026-80088 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-80090 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-83949 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-83951 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Office Word Remote Code Execution Vulnerability | |||||||
| CVE-2026-69360 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69556 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69671 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69686 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69722 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69759 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69764 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-72972 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-72973 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77504 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-77901 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78504 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78507 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78511 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78512 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78514 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78517 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78521 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78526 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-80080 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-80085 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | |||||||
| CVE-2026-69397 | No | No | - | - | Important | 7.5 | 6.5 |
| Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | |||||||
| CVE-2026-77897 | No | No | - | - | Important | 7.0 | 6.1 |
| Microsoft PowerShell Security Feature Bypass Vulnerability | |||||||
| CVE-2026-62801 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | |||||||
| CVE-2026-57098 | No | No | - | - | Important | 7.5 | 6.5 |
| Microsoft SQL Server Denial of Service Vulnerability | |||||||
| CVE-2026-67376 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-67633 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67641 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft SQL Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65669 | No | No | - | - | Critical | 9.6 | 8.3 |
| CVE-2026-66814 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-66818 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-66819 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67368 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67370 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67381 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SQL Server Information Disclosure Vulnerability | |||||||
| CVE-2026-67369 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67383 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67386 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67389 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67390 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67393 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67624 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67629 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67630 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67645 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-67648 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68776 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68777 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68778 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68779 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68780 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68781 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68784 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69562 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-73029 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-77488 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft SQL Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-47297 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-67373 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67378 | No | No | - | - | Critical | 8.5 | 7.4 |
| CVE-2026-67379 | No | No | - | - | Important | 8.5 | 7.4 |
| CVE-2026-67380 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67384 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67385 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67388 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67631 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-67636 | No | No | - | - | Critical | 8.5 | 7.4 |
| CVE-2026-67638 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67639 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67642 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-67643 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-68775 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-68785 | No | No | - | - | Important | 4.9 | 4.3 |
| CVE-2026-68786 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-68787 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-77481 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77482 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77484 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77486 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SQL Server Security Feature Bypass Vulnerability | |||||||
| CVE-2026-66816 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Standard XPS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68885 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68888 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68889 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-68890 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68892 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68897 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69269 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69271 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69272 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69313 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69336 | No | No | - | - | Important | 7.1 | 6.2 |
| Microsoft Standard XPS Information Disclosure Vulnerability | |||||||
| CVE-2026-68881 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-68891 | No | No | - | - | Important | 4.7 | 4.1 |
| CVE-2026-69308 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69345 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69367 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69376 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Standard XPS Remote Code Execution Vulnerability | |||||||
| CVE-2026-69824 | No | No | - | - | Important | 9.8 | 8.5 |
| Microsoft Storage Port Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72946 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Teams for Android Information Disclosure Vulnerability | |||||||
| CVE-2026-65812 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-69559 | No | No | - | - | Important | 5.8 | 5.1 |
| Microsoft Trace Data Helper Elevation of Privilege Vulnerability | |||||||
| CVE-2026-56198 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | |||||||
| CVE-2026-69276 | No | No | - | - | Important | 9.8 | 8.5 |
| Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69420 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69427 | No | No | - | - | Important | 8.0 | 7.0 |
| Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | |||||||
| CVE-2026-72933 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft WebP Image Extension Remote Code Execution Vulnerability | |||||||
| CVE-2026-70351 | No | No | - | - | Critical | 8.8 | 7.7 |
| Microsoft Windows Media Foundation Remote Code Execution Vulnerability | |||||||
| CVE-2026-62706 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-62744 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69386 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69408 | No | No | - | - | Important | 9.8 | 8.5 |
| CVE-2026-69511 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69601 | No | No | - | - | Critical | 8.8 | 7.7 |
| Microsoft Windows PDF Remote Code Execution Vulnerability | |||||||
| CVE-2026-69586 | No | No | - | - | Important | 9.8 | 8.5 |
| Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | |||||||
| CVE-2026-78451 | No | No | - | - | Important | 6.8 | 5.9 |
| Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | |||||||
| CVE-2026-78452 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-78453 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Windows Search Component Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68896 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69305 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69322 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69585 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69600 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69608 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69911 | No | No | - | - | Important | 7.0 | 6.1 |
| Microsoft Windows Search Component Information Disclosure Vulnerability | |||||||
| CVE-2026-69507 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-70145 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Windows Search Component Tampering Vulnerability | |||||||
| CVE-2026-69453 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69554 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Windows Speech Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69444 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69456 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Windows Speech Tampering Vulnerability | |||||||
| CVE-2026-69531 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Word Remote Code Execution Vulnerability | |||||||
| CVE-2026-62804 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-78510 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-81952 | No | No | - | - | Critical | 8.8 | 7.7 |
| Power Automate Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-65818 | No | No | - | - | Critical | 8.5 | 7.4 |
| PowerShell Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69807 | No | No | - | - | Important | 8.0 | 7.0 |
| Push Message Routing Service Information Disclosure Vulnerability | |||||||
| CVE-2026-69303 | No | No | - | - | Important | 5.5 | 4.8 |
| RPC Runtime Library Remote Code Execution Vulnerability | |||||||
| CVE-2026-69819 | No | No | - | - | Important | 9.8 | 8.5 |
| Raw Image Extension Remote Code Execution Vulnerability | |||||||
| CVE-2026-69649 | No | No | - | - | Critical | 8.8 | 7.7 |
| Remote Desktop Client Remote Code Execution Vulnerability | |||||||
| CVE-2026-68828 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69358 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69485 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-78463 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-80074 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-80077 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-83998 | No | No | - | - | Important | 8.8 | 7.7 |
| Remote Desktop Gateway Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69292 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69338 | No | No | - | - | Important | 7.1 | 6.2 |
| Remote Desktop Licensing Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68893 | No | No | - | - | Important | 7.1 | 6.2 |
| Remote Desktop ServicesRemote Code Execution Vulnerability | |||||||
| CVE-2026-69514 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69525 | No | No | - | - | Important | 9.8 | 8.5 |
| CVE-2026-69536 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69539 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69599 | No | No | - | - | Important | 7.5 | 6.5 |
| Role: Windows Fax Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69509 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69621 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-72944 | No | No | - | - | Important | 7.8 | 6.8 |
| SQL Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-66820 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-73028 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77480 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77483 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77485 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-77487 | No | No | - | - | Important | 8.8 | 7.7 |
| SQL Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-78456 | No | No | - | - | Important | 8.8 | 7.7 |
| Skype for Business Information Disclosure Vulnerability | |||||||
| CVE-2026-66304 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-66306 | No | No | - | - | Important | 6.5 | 5.7 |
| Skype for Business Remote Code Execution Vulnerability | |||||||
| CVE-2026-66302 | No | No | - | - | Critical | 9.8 | 8.5 |
| Skype for Business Spoofing Vulnerability | |||||||
| CVE-2026-63523 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-66305 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69642 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69646 | No | No | - | - | Important | 8.3 | 7.2 |
| Skype for Business and Lync Denial of Service Vulnerability | |||||||
| CVE-2026-66303 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-66307 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-66308 | No | No | - | - | Important | 6.5 | 5.7 |
| Spring Cloud Azure Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69854 | No | No | - | - | Critical | 9.0 | 7.8 |
| Storage Spaces Controller Information Disclosure Vulnerability | |||||||
| CVE-2026-69568 | No | No | - | - | Important | 5.5 | 4.8 |
| Telnet Client Remote Code Execution Vulnerability | |||||||
| CVE-2026-69431 | No | No | - | - | Important | 9.8 | 8.5 |
| Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | |||||||
| CVE-2026-69384 | No | No | - | - | Important | 7.1 | 6.2 |
| Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | |||||||
| CVE-2026-69541 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69549 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69611 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69681 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-70574 | No | No | - | - | Important | 7.8 | 6.8 |
| Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | |||||||
| CVE-2026-81355 | No | No | - | - | Critical | 7.5 | 6.5 |
| Visual Studio Code Information Disclosure Vulnerability | |||||||
| CVE-2026-81383 | No | No | - | - | Important | 7.4 | 6.4 |
| Visual Studio Code Security Feature Bypass Vulnerability | |||||||
| CVE-2026-70334 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-78461 | No | No | - | - | Important | 7.4 | 6.4 |
| CVE-2026-78462 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-81356 | No | No | - | - | Important | 8.2 | 7.1 |
| CVE-2026-81357 | No | No | - | - | Important | 8.2 | 7.1 |
| CVE-2026-81376 | No | No | - | - | Important | 9.6 | 8.3 |
| CVE-2026-81378 | No | No | - | - | Important | 8.2 | 7.1 |
| CVE-2026-81379 | No | No | - | - | Important | 8.2 | 7.1 |
| Visual Studio Code Tampering Vulnerability | |||||||
| CVE-2026-81377 | No | No | - | - | Important | 6.5 | 5.7 |
| Visual Studio Remote Code Execution Vulnerability | |||||||
| CVE-2026-77906 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-77907 | No | No | - | - | Important | 8.8 | 7.7 |
| Volume Manager Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69407 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69418 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69432 | No | No | - | - | Important | 7.8 | 6.8 |
| Volume Shadow Copy Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72985 | No | No | - | - | Important | 6.8 | 5.9 |
| Web Media Extensions Remote Code Execution Vulnerability | |||||||
| CVE-2026-81352 | No | No | - | - | Critical | 8.8 | 7.7 |
| Win32k Information Disclosure Vulnerability | |||||||
| CVE-2026-69609 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69808 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69832 | No | No | - | - | Important | 5.6 | 4.9 |
| CVE-2026-69853 | No | No | - | - | Important | 4.7 | 4.1 |
| CVE-2026-70290 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70565 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows ALPC Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69834 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69874 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Accounts Control Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69654 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69816 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Active Directory Domain Services Denial of Service Vulnerability | |||||||
| CVE-2026-62762 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69809 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Active Directory Domain Services Remote Code Execution Vulnerability | |||||||
| CVE-2026-62813 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69524 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69546 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-85880 | No | Yes | - | - | Important | 7.8 | 6.8 |
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |||||||
| CVE-2026-50349 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-70342 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows Audio Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69311 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69394 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69447 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69540 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69604 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69692 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69801 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70562 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Authentication Methods Elevation of Privilege Vulnerability | |||||||
| CVE-2026-73005 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Autopilot Tampering Vulnerability | |||||||
| CVE-2026-73004 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Bind Filter Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68825 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Biometric Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69293 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69298 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69323 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69352 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69476 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69489 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69580 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69583 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69589 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69593 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69727 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69738 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69773 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69787 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69826 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-70572 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70573 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-70581 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72941 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72988 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72990 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72991 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72992 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72993 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72994 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72995 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72996 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72997 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73000 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73001 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73002 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73007 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73011 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73015 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73020 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73021 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-73026 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-77489 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-78447 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-78448 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83954 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83955 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83967 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83968 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83969 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83970 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83971 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83972 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83973 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83974 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83975 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83976 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83977 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83978 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83979 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83980 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83981 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83982 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83983 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83985 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83986 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83987 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83988 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Biometric Service Information Disclosure Vulnerability | |||||||
| CVE-2026-73008 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows BitLocker Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69458 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows BitLocker Remote Code Execution Vulnerability | |||||||
| CVE-2026-69449 | No | No | - | - | Important | 6.7 | 5.8 |
| Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69817 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Bluetooth Port Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-68849 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Bluetooth Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69388 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69398 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69448 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69889 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Boot Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-77892 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69735 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69391 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows CD-ROM Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69283 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69561 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows CD-ROM Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-78454 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-78508 | No | No | - | - | Important | 4.6 | 4.0 |
| Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69542 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69279 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-80093 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Cloud Files Mini Filter Driver Tampering Vulnerability | |||||||
| CVE-2026-83991 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Compressed Folder Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69445 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Compressed Folder Information Disclosure Vulnerability | |||||||
| CVE-2026-70019 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Compressed Folder Remote Code Execution Vulnerability | |||||||
| CVE-2026-69496 | No | No | - | - | Important | 9.8 | 8.5 |
| Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | |||||||
| CVE-2026-69267 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Container Manager Service Security Feature Bypass Vulnerability | |||||||
| CVE-2026-69771 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Core Messaging Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70583 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70584 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Credential Guard Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70578 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-72958 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Credential Providers Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69790 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69814 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Credential Providers Remote Code Execution Vulnerability | |||||||
| CVE-2026-69729 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows DCOM Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69284 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows DHCP Client Denial of Service Vulnerability | |||||||
| CVE-2026-69781 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows DHCP Client Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69777 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows DHCP Server Denial of Service Vulnerability | |||||||
| CVE-2026-69342 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69405 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-69416 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-69497 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69637 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-69679 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-70065 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77494 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77498 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77499 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77501 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77502 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77886 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77888 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77889 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77890 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77893 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77895 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows DHCP Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69415 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows DHCP Server Information Disclosure Vulnerability | |||||||
| CVE-2026-69297 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-69803 | No | No | - | - | Important | 5.9 | 5.2 |
| CVE-2026-69929 | No | No | - | - | Important | 5.9 | 5.2 |
| CVE-2026-69930 | No | No | - | - | Important | 5.9 | 5.2 |
| CVE-2026-70124 | No | No | - | - | Important | 5.9 | 5.2 |
| Windows DHCP Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-69266 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69412 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69510 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69547 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69620 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69845 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-69847 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69876 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69878 | No | No | - | - | Important | 6.4 | 5.6 |
| CVE-2026-72979 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-77887 | No | No | - | - | Important | 6.4 | 5.6 |
| CVE-2026-77891 | No | No | - | - | Important | 6.4 | 5.6 |
| Windows DNS Denial of Service Vulnerability | |||||||
| CVE-2026-69631 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-70091 | No | No | - | - | Important | 5.9 | 5.2 |
| Windows DNS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69310 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-72948 | No | No | - | - | Important | 6.7 | 5.8 |
| Windows DNS Information Disclosure Vulnerability | |||||||
| CVE-2026-69369 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69672 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows DNS Remote Code Execution Vulnerability | |||||||
| CVE-2026-72987 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows DNS Server Denial of Service Vulnerability | |||||||
| CVE-2026-78523 | No | No | - | - | Important | 5.9 | 5.2 |
| Windows DNS Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-69551 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69730 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-69782 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-69813 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-69827 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-69858 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-69989 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-72928 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-77505 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows DNS Spoofing Vulnerability | |||||||
| CVE-2026-69680 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows DWM Core Library Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69775 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows Defender Firewall Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70568 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Defender Firewall Service Information Disclosure Vulnerability | |||||||
| CVE-2026-68831 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Deployment Services Remote Code Execution Vulnerability | |||||||
| CVE-2026-69607 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-72943 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-72954 | No | No | - | - | Critical | 7.5 | 6.5 |
| CVE-2026-72957 | No | No | - | - | Critical | 7.8 | 6.8 |
| Windows Device Association Broker Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69314 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69693 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Device Association Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69296 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69478 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69488 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69574 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69581 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69711 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69714 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69791 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69866 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-77500 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-83940 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | |||||||
| CVE-2026-69443 | No | No | - | - | Important | 7.5 | 7.5 |
| Windows Devices Human Interface Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69472 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Direct Show Remote Code Execution Vulnerability | |||||||
| CVE-2026-69715 | No | No | - | - | Important | 9.8 | 8.5 |
| Windows Display Enhancement Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70567 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Distributed File System (DFS) Denial of Service Vulnerability | |||||||
| CVE-2026-78446 | No | No | - | - | Important | 5.3 | 4.6 |
| Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69424 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Embedded Mode Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69430 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69688 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69841 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Encrypting File System (EFS) Information Disclosure Vulnerability | |||||||
| CVE-2026-69794 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Enterprise App Management Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69481 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69907 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Error Reporting Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68894 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69362 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69433 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69436 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69450 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69462 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69513 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69612 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69896 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-83996 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Error Reporting Information Disclosure Vulnerability | |||||||
| CVE-2026-69684 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Error Reporting Tampering Vulnerability | |||||||
| CVE-2026-69482 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows Event Logging Service Remote Code Execution Vulnerability | |||||||
| CVE-2026-69493 | No | No | - | - | Important | 9.8 | 8.5 |
| CVE-2026-69494 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69495 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Failover Cluster Elevation of Privilege Vulnerability | |||||||
| CVE-2026-71338 | No | No | - | - | Important | 6.4 | 5.6 |
| Windows Failover Cluster Information Disclosure Vulnerability | |||||||
| CVE-2026-72989 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Fast FAT Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68878 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows Fast FAT Driver Remote Code Execution Vulnerability | |||||||
| CVE-2026-69347 | No | No | - | - | Important | 7.4 | 6.4 |
| Windows File History Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68837 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-71340 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-72947 | No | No | - | - | Important | 6.4 | 5.6 |
| Windows GDI Information Disclosure Vulnerability | |||||||
| CVE-2026-77491 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows GDI+ Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68827 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows GDI+ Information Disclosure Vulnerability | |||||||
| CVE-2026-69288 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Graphics Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-77493 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-81955 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Group Policy Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69717 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows HTTP Print Provider Remote Code Execution Vulnerability | |||||||
| CVE-2026-69623 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69769 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows HTTP.sys Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69597 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows Hello Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69710 | No | No | - | - | Critical | 7.5 | 6.5 |
| CVE-2026-69725 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-69740 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69784 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69799 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-69820 | No | No | - | - | Critical | 8.2 | 7.1 |
| CVE-2026-69864 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-81354 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Hello Security Feature Bypass Vulnerability | |||||||
| CVE-2026-72980 | No | No | - | - | Critical | 4.4 | 3.9 |
| Windows Host Guardian Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69682 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Hyper-V Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69553 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-72961 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Hyper-V Remote Code Execution Vulnerability | |||||||
| CVE-2026-69603 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69910 | No | No | - | - | Important | 9.8 | 8.5 |
| CVE-2026-80083 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69694 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Image Acquisition Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69341 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69500 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69613 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Image Acquisition Information Disclosure Vulnerability | |||||||
| CVE-2026-69483 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Imaging Component Information Disclosure Vulnerability | |||||||
| CVE-2026-69318 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Imaging Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-69499 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-69860 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-70296 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-73013 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-73023 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-77495 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-83992 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Installer Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62694 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69441 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-71339 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-72929 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-77894 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72926 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Internet Connection Sharing (ICS) Tampering Vulnerability | |||||||
| CVE-2026-72964 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | |||||||
| CVE-2026-69587 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69881 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | |||||||
| CVE-2026-69429 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Kerberos Denial of Service Vulnerability | |||||||
| CVE-2026-69744 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-69760 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Kerberos Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69685 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69822 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Kerberos Remote Code Execution Vulnerability | |||||||
| CVE-2026-69676 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Kernel Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68846 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-68884 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69366 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69466 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69473 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69578 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-83942 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-85360 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Kernel Information Disclosure Vulnerability | |||||||
| CVE-2026-69406 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69723 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Kernel Remote Code Execution Vulnerability | |||||||
| CVE-2026-69669 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69421 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Key Distribution Center Denial of Service Vulnerability | |||||||
| CVE-2026-84001 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Key Distribution Center Remote Code Execution Vulnerability | |||||||
| CVE-2026-69712 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | |||||||
| CVE-2026-69428 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows License Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69281 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows License Manager Information Disclosure Vulnerability | |||||||
| CVE-2026-69315 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | |||||||
| CVE-2026-69732 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows MIDI Service Module Elevation of Privileges Vulnerability | |||||||
| CVE-2026-69440 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69508 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69720 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-78464 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows MIDI Service Module Information Disclosure Vulnerability | |||||||
| CVE-2026-68842 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69339 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Management Instrumentation Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69451 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-70582 | No | No | - | - | Important | 6.4 | 5.6 |
| CVE-2026-77905 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Management Instrumentation Information Disclosure Vulnerability | |||||||
| CVE-2026-69349 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Management Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-73012 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Media Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69891 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Media Player Remote Code Execution Vulnerability | |||||||
| CVE-2026-70203 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-72960 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Message Queuing Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69645 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Message Queuing Queue Manager Denial of Service Vulnerability | |||||||
| CVE-2026-68887 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Message Queuing Queue Manager Information Disclosure Vulnerability | |||||||
| CVE-2026-72932 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Message Queuing Remote Code Execution Vulnerability | |||||||
| CVE-2026-69579 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-83997 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows Mobile Broadband Information Disclosure Vulnerability | |||||||
| CVE-2026-70579 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69377 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69460 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-70577 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-73003 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-73022 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | |||||||
| CVE-2026-69674 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Modern Execution Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72963 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows NDIS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69357 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69396 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows NFS Portmapper Elevation of Privilege Vulnerability | |||||||
| CVE-2026-71334 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows NTFS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68832 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68834 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-68838 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-68841 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69265 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69312 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69332 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69340 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69379 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69505 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69532 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69567 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69875 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-72935 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-77503 | No | No | - | - | Important | 8.4 | 7.3 |
| CVE-2026-83995 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows NTFS Information Disclosure Vulnerability | |||||||
| CVE-2026-68851 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69504 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69591 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows NTFS Remote Code Execution Vulnerability | |||||||
| CVE-2026-68833 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-68875 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69461 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69463 | No | No | - | - | Important | 9.8 | 8.5 |
| CVE-2026-69479 | No | No | - | - | Important | 8.4 | 7.3 |
| CVE-2026-69566 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-69638 | No | No | - | - | Important | 8.4 | 7.3 |
| CVE-2026-69709 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71329 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows NTFS Tampering Vulnerability | |||||||
| CVE-2026-69425 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Netlogon Remote Code Execution Vulnerability | |||||||
| CVE-2026-72982 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows Netlogon Spoofing Vulnerability | |||||||
| CVE-2026-62759 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Network Connection Broker Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72967 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Network Connection Broker Information Disclosure Vulnerability | |||||||
| CVE-2026-68886 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Network File System Denial of Service Vulnerability | |||||||
| CVE-2026-69372 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Network File System Remote Code Execution Vulnerability | |||||||
| CVE-2026-69772 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Notification Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69648 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows OLE DB Information Disclosure Vulnerability | |||||||
| CVE-2026-78441 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows OLE DB Remote Code Execution Vulnerability | |||||||
| CVE-2026-78442 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69564 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Overlay Filter Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69350 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-69368 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69371 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69373 | No | No | - | - | Important | 6.7 | 5.8 |
| Windows Overlay Filter Information Disclosure Vulnerability | |||||||
| CVE-2026-69316 | No | No | - | - | Important | 4.7 | 4.1 |
| CVE-2026-69343 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69474 | No | No | - | - | Important | 4.8 | 4.2 |
| Windows Paint Remote Code Execution Vulnerability | |||||||
| CVE-2026-70586 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Partition Management Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69480 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69492 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Partition Management Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-71341 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Performance Monitor Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69324 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69459 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Power Dependency Coordinator Tampering Vulnerability | |||||||
| CVE-2026-69321 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Print Spooler Components Denial of Service Vulnerability | |||||||
| CVE-2026-69569 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Print Spooler Components Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68835 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-68848 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69309 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69346 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69364 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69838 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69921 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70564 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Print Spooler Components Information Disclosure Vulnerability | |||||||
| CVE-2026-69344 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69552 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Print Spooler Remote Code Execution Vulnerability | |||||||
| CVE-2026-85877 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69602 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68845 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68876 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69534 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69563 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | |||||||
| CVE-2026-68873 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-68874 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Push Notifications Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62697 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69280 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69300 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows RNDIS Information Disclosure Vulnerability | |||||||
| CVE-2026-69548 | No | No | - | - | Important | 4.6 | 4.0 |
| Windows RNDIS Remote Code Execution Vulnerability | |||||||
| CVE-2026-69768 | No | No | - | - | Important | 9.8 | 8.5 |
| Windows Registry Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69337 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | |||||||
| CVE-2026-69530 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-78449 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-78450 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69331 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69455 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71333 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-71342 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Remote Access Connection Manager Remote Code Execution Vulnerability | |||||||
| CVE-2026-71343 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71352 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Remote Access Connection Manager Tampering Vulnerability | |||||||
| CVE-2026-72966 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Remote Desktop Client Denial of Service Vulnerability | |||||||
| CVE-2026-77896 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Remote Desktop Client Information Disclosure Vulnerability | |||||||
| CVE-2026-69317 | No | No | - | - | Important | 5.7 | 5.0 |
| Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | |||||||
| CVE-2026-69627 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Remote Desktop Protocol Information Disclosure Vulnerability | |||||||
| CVE-2026-70587 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Remote Desktop Remote Code Execution Vulnerability | |||||||
| CVE-2026-69518 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Remote Desktop Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69287 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69475 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-80096 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Remote Desktop Services Information Disclosure Vulnerability | |||||||
| CVE-2026-69616 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-83999 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69617 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-83952 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | |||||||
| CVE-2026-72939 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-71351 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-71353 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | |||||||
| CVE-2026-69590 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-69852 | No | No | - | - | Critical | 7.5 | 6.5 |
| CVE-2026-70570 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-72950 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-72959 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows SMB Client Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69544 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows SMB Client Information Disclosure Vulnerability | |||||||
| CVE-2026-69572 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-69618 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows SMB Client Remote Code Execution Vulnerability | |||||||
| CVE-2026-72936 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows SMB Server Denial of Service Vulnerability | |||||||
| CVE-2026-69374 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows SMB Server Information Disclosure Vulnerability | |||||||
| CVE-2026-69403 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | |||||||
| CVE-2026-72949 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Schannel Denial of Service Vulnerability | |||||||
| CVE-2026-70575 | No | No | - | - | Important | 5.3 | 4.6 |
| Windows Schannel Remote Code Execution Vulnerability | |||||||
| CVE-2026-72940 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Secure Boot Security Feature Bypass Vulnerability | |||||||
| CVE-2026-69713 | No | No | - | - | Important | 4.4 | 3.9 |
| Windows Secure Kernel Mode Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69501 | No | No | - | - | Critical | 7.0 | 6.1 |
| CVE-2026-69846 | No | No | - | - | Critical | 8.2 | 7.1 |
| CVE-2026-69906 | No | No | - | - | Critical | 8.2 | 7.1 |
| CVE-2026-83939 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | |||||||
| CVE-2026-72931 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-71332 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | |||||||
| CVE-2026-72930 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-73009 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows Security Center Elevation of Privilege Vulnerability | |||||||
| CVE-2026-77899 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Security Health Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-78457 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-56177 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | |||||||
| CVE-2026-83989 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-73024 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-71330 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | |||||||
| CVE-2026-69595 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-70585 | No | No | - | - | Critical | 7.0 | 6.1 |
| CVE-2026-78445 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows Setup Files Cleanup Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69289 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Shell Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69383 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69392 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69528 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69606 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Shell Remote Code Execution Vulnerability | |||||||
| CVE-2026-69829 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows Shell Spoofing Vulnerability | |||||||
| CVE-2026-70563 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows Smart Card Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69785 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Spaceport.sys Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69512 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69535 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69643 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69691 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70569 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Spaceport.sys Information Disclosure Vulnerability | |||||||
| CVE-2026-69390 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69393 | No | No | - | - | Important | 5.7 | 5.0 |
| CVE-2026-69741 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69770 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69895 | No | No | - | - | Important | 4.7 | 4.1 |
| CVE-2026-72942 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Spaceport.sys Remote Code Execution Vulnerability | |||||||
| CVE-2026-69538 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71345 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71348 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-71349 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-71350 | No | No | - | - | Important | 6.8 | 5.9 |
| CVE-2026-72952 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Storage Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69328 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Storage Information Disclosure Vulnerability | |||||||
| CVE-2026-78516 | No | No | - | - | Important | 4.3 | 3.8 |
| Windows Storage Management Provider Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69389 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-71337 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Storage Port Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-69381 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-72937 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-77492 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Storage Spaces Controller Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69290 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69575 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Storage Spaces Controller Remote Code Execution Vulnerability | |||||||
| CVE-2026-68844 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68877 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows TCP/IP Denial of Service Vulnerability | |||||||
| CVE-2026-69588 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows TCP/IP Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69385 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69404 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69757 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69761 | No | No | - | - | Important | 7.1 | 6.2 |
| Windows TCP/IP Security Feature Bypass Vulnerability | |||||||
| CVE-2026-69793 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows Task Scheduler Information Disclosure Vulnerability | |||||||
| CVE-2026-72945 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Text Shaping Information Disclosure Vulnerability | |||||||
| CVE-2026-69353 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Text Shaping Remote Code Execution Vulnerability | |||||||
| CVE-2026-69786 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows URL Moniker Remote Code Execution Vulnerability | |||||||
| CVE-2026-69434 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows URL Moniker Security Feature Bypass Vulnerability | |||||||
| CVE-2026-73019 | No | No | - | - | Important | 4.3 | 3.8 |
| Windows USB Audio Class Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-69286 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69270 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69307 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69413 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69469 | No | No | - | - | Important | 6.6 | 5.8 |
| CVE-2026-69571 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69687 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69707 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69859 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows USB Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68840 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69295 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69503 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-72953 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows USB Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-69457 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows USB Hub Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72999 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69490 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | |||||||
| CVE-2026-69527 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | |||||||
| CVE-2026-68839 | No | No | - | - | Important | 9.8 | 8.5 |
| Windows USB Video Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69319 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69422 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69423 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69584 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-72962 | No | No | - | - | Critical | 8.2 | 7.1 |
| Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69573 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69592 | No | No | - | - | Important | 7.8 | 7.8 |
| CVE-2026-69758 | No | No | - | - | Important | 7.8 | 7.8 |
| Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | |||||||
| CVE-2026-68830 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-69351 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Update Stack Elevation of Privilege Vulnerability | |||||||
| CVE-2026-81963 | No | Yes | - | - | Important | 7.8 | 7.2 |
| Windows VHD miniport driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-56172 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows VOLSNAP.SYS Remote Code Execution Vulnerability | |||||||
| CVE-2026-69426 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69890 | No | No | - | - | Critical | 7.5 | 6.5 |
| Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | |||||||
| CVE-2026-83498 | No | No | - | - | Critical | 7.8 | 6.8 |
| Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | |||||||
| CVE-2026-83501 | No | No | - | - | Critical | 5.5 | 4.8 |
| Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69468 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69582 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-77904 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | |||||||
| CVE-2026-69291 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69334 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Web Platform Storage Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69708 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows WebClient Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72965 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Win32K Security Feature Bypass Vulnerability | |||||||
| CVE-2026-69792 | No | No | - | - | Important | 4.7 | 4.1 |
| Windows Win32k Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68880 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69274 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69301 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69333 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69335 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69348 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69410 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69498 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69610 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69630 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69652 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69689 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69706 | No | No | - | - | Important | 7.1 | 6.2 |
| CVE-2026-69762 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-69779 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69818 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-69844 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70283 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-70289 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Wireless Networking Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69517 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | |||||||
| CVE-2026-69862 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Work Folder Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69560 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Work Folder Service Remote Code Execution Vulnerability | |||||||
| CVE-2026-71336 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Work Folders Elevation of Privilege Vulnerability | |||||||
| CVE-2026-80075 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows exFAT File System Elevation of Privilege Vulnerability | |||||||
| CVE-2026-69619 | No | No | - | - | Important | 8.0 | 7.0 |
| Windows iSCSI Denial of Service Vulnerability | |||||||
| CVE-2026-68898 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows iSCSI Remote Code Execution Vulnerability | |||||||
| CVE-2026-69598 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69628 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows iSCSI Security Feature Bypass Vulnerability | |||||||
| CVE-2026-73025 | No | No | - | - | Important | 9.8 | 8.5 |
| Windows iSCSI Target Service Denial of Service Vulnerability | |||||||
| CVE-2026-69839 | No | No | - | - | Important | 6.5 | 5.7 |
| Winsock Elevation of Privilege Vulnerability | |||||||
| CVE-2026-72927 | No | No | - | - | Important | 6.7 | 5.8 |
| Xbox Gaming Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-58611 | No | No | - | - | Important | 7.8 | 6.8 |
| Xbox Information Disclosure Vulnerability | |||||||
| CVE-2026-78455 | No | No | - | - | Important | 4.3 | 3.8 |
--
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|
Comments