Microsoft Patch Tuesday August 2026
This month we got patches for 418 vulnerabilities. Of these, 62 are critical, 1 is being exploited in the wild, and 2 were publicly disclosed as zero-days. Notable fixes include Windows privilege escalation, container tampering, and critical QUIC and DNS Server remote code execution bugs.
A few vulnerabilities worth mentioning:
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVE-2026-68820)
This Important-severity elevation of privilege vulnerability is listed by Microsoft as exploited in the wild but not publicly disclosed, and it has a CVSS score of 7.0. The flaw is a use-after-free issue in the Windows Ancillary Function Driver for WinSock affecting supported Windows client and server versions; a locally authenticated attacker with low privileges could run a specially crafted application to trigger a race condition and, if successful, gain SYSTEM privileges. The CVSS vector reflects local access, low privileges required, no user interaction, and high attack complexity because exploitation requires winning that race condition. Administrators should prioritize applying the relevant Windows security updates, particularly on systems where local code execution by untrusted users is possible, and monitor for suspicious privilege-escalation activity.
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2026-62832)
Microsoft says this vulnerability has been publicly disclosed but has not been exploited in the wild, making it a zero-day disclosure without confirmed exploitation at this time. Rated Important with a CVSS score of 7.8, this Windows User Profile Service flaw is an improper link resolution, or “link following,” issue that could allow a local authenticated attacker to elevate privileges. To exploit it, an attacker would need credentials for another local account and could run a specially crafted application to load another user’s registry hive; successful exploitation could allow access to or modification of another user’s data and ultimately grant administrator privileges. User interaction is not required. Administrators should prioritize applying the Microsoft security updates across affected Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025 systems, and should also limit local account reuse and monitor for unusual registry hive loading or profile service activity.
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability (CVE-2026-72971)
This vulnerability was publicly disclosed before Patch Tuesday, making it a zero-day, but Microsoft says it has not been exploited in the wild; it is rated Important with a CVSS score of 5.5. The flaw is an improper link-resolution, or “link following,” issue in the Windows Container Isolation file system filter driver, unionfs.sys, affecting Windows 11 Version 26H1 on x64 and ARM64 systems. A local, authenticated attacker could exploit it with low complexity and no user interaction to tamper with files, resulting in high integrity impact, though Microsoft rates confidentiality and availability impact as none. Administrators should apply the Windows updates that correct the driver’s link-handling behavior, particularly on systems using Windows containers or container isolation features.
Microsoft QUIC Remote Code Execution Vulnerability (CVE-2026-62815)
This Critical Microsoft QUIC remote code execution vulnerability is not listed as exploited in the wild or publicly disclosed. It carries a CVSS score of 9.8 and is a use-after-free flaw that could allow an unauthenticated remote attacker to send a specially crafted packet to an affected service over the network and execute code on the target system, with no user interaction required. Affected platforms include Windows 11 and Windows Server 2022/2025, including Server Core installations. Administrators should prioritize applying the Microsoft update, especially on systems exposing QUIC-enabled services to untrusted networks, and consider limiting network exposure where patching cannot be completed immediately.
Windows DNS Server Remote Code Execution Vulnerability (CVE-2026-62878)
Microsoft reports that CVE-2026-62878 is neither exploited in the wild nor publicly disclosed; it is a Critical Windows DNS Server remote code execution vulnerability with a CVSS score of 9.8. The flaw is a stack-based buffer overflow in Windows DNS that can be triggered remotely by an unauthenticated attacker sending a specially crafted packet to an affected service over the network, with no user interaction required, potentially allowing code execution on the target DNS server. Affected systems include multiple Windows Server releases from 2012 through 2025, as well as listed Windows 10 versions where the vulnerable component is present. Administrators should apply Microsoft’s security updates promptly, especially on DNS servers, and reduce exposure by limiting DNS service access to trusted networks where possible, blocking unnecessary inbound traffic at firewalls, and monitoring DNS servers for crashes or anomalous traffic patterns.
This was a summary of Microsoft’s monthly updates highlighting some important vulnerabilities. Prioritize the exploited WinSock privilege-escalation flaw, then the publicly disclosed User Profile Service and unionfs.sys issues, and patch internet-exposed QUIC services and DNS servers quickly due to remote code execution risk.
A detailed list of this month's vulnerabilities follows below. To search and filter them, visit my dashboard: https://patchlens.io
| Description | |||||||
|---|---|---|---|---|---|---|---|
| CVE | Disclosed | Exploited | Exploitability (old versions) | current version | Severity | CVSS Base (AVG) | CVSS Temporal (AVG) |
| .NET Core Remote Code Execution Vulnerability | |||||||
| CVE-2026-70354 | No | No | - | - | Important | 7.8 | 6.8 |
| .NET Denial of Service Vulnerability | |||||||
| CVE-2026-62901 | No | No | - | - | Important | 7.5 | 6.5 |
| .NET Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62909 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-58641 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62871 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62886 | No | No | - | - | Important | 7.8 | 6.8 |
| .NET Framework Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62872 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-65810 | No | No | - | - | Important | 7.8 | 6.8 |
| .NET Framework Remote Code Execution Vulnerability | |||||||
| CVE-2026-62897 | No | No | - | - | Important | 7.0 | 6.1 |
| .NET Information Disclosure Vulnerability | |||||||
| CVE-2026-62900 | No | No | - | - | Important | 5.9 | 5.2 |
| CVE-2026-62902 | No | No | - | - | Important | 6.5 | 5.7 |
| .NET Security Feature Bypass Vulnerability | |||||||
| CVE-2026-62899 | No | No | - | - | Important | 5.9 | 5.2 |
| AMD Zen Information Disclosure Vulnerability | |||||||
| CVE-2026-59130 | No | No | - | - | Important | 5.6 | 4.9 |
| CVE-2026-59131 | No | No | - | - | Important | 5.6 | 4.9 |
| Active Directory Security Feature Bypass Vulnerability | |||||||
| CVE-2026-65777 | No | No | - | - | Important | 5.3 | 4.6 |
| Application Information Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61357 | No | No | - | - | Important | 7.8 | 6.8 |
| Application Insights Profiler Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-49163 | No | No | - | - | Critical | 8.8 | 7.7 |
| Azure Active Directory Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-50481 | No | No | - | - | Critical | 9.9 | 8.6 |
| Azure Confidential Ledger Remote Code Execution Vulnerability (no customer action required) |
|||||||
| CVE-2026-68823 | No | No | - | - | Critical | 9.1 | 7.9 |
| Azure CycleCloud Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70340 | No | No | - | - | Important | 8.1 | 7.1 |
| Azure CycleCloud Information Disclosure Vulnerability | |||||||
| CVE-2026-65806 | No | No | - | - | Important | 6.5 | 5.7 |
| Azure Entra ID Spoofing Vulnerability (no customer action required) |
|||||||
| CVE-2026-62869 | No | No | - | - | Critical | 8.8 | 7.7 |
| Azure Logic Apps Information Disclosure Vulnerability (no customer action required) |
|||||||
| CVE-2026-56161 | No | No | - | - | Critical | 9.6 | 8.3 |
| Azure Monitor Agent Elevation of Privilege Vulnerability | |||||||
| CVE-2026-47299 | No | No | - | - | Important | 7.2 | 6.3 |
| Azure SQL Database Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-63522 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-56162 | No | No | - | - | Critical | 10.0 | 8.7 |
| Azure SQL Managed Instance Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-62836 | No | No | - | - | Critical | 8.7 | 7.6 |
| Azure SRE Agent Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-62830 | No | No | - | - | Critical | 9.9 | 8.6 |
| Azure Service Bus Remote Code Execution Vulnerability (no customer action required) |
|||||||
| CVE-2026-50515 | No | No | - | - | Critical | 9.9 | 8.6 |
| Azure Storage Explorer Elevation of Privilege Vulnerability | |||||||
| CVE-2026-57104 | No | No | - | - | Important | 8.8 | 7.7 |
| Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62892 | No | No | - | - | Important | 7.0 | 6.1 |
| CoPilot Chat Security Feature Bypass Vulnerability | |||||||
| CVE-2026-65675 | No | No | - | - | Important | 7.1 | 6.2 |
| Copilot Cowork Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-59118 | No | No | - | - | Critical | 9.3 | 8.1 |
| Desktop Window Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65786 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65787 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65788 | No | No | - | - | Important | 7.0 | 6.1 |
| GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70335 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft 365 Admin Center Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-62873 | No | No | - | - | Critical | 9.8 | 8.5 |
| Microsoft Access Remote Code Execution Vulnerability | |||||||
| CVE-2026-64906 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64912 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64908 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64914 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64920 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64919 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-50516 | No | No | - | - | Critical | 9.4 | 8.2 |
| Microsoft COM for Windows Information Disclosure Vulnerability | |||||||
| CVE-2026-59136 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | |||||||
| CVE-2026-54123 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Digest Authentication Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62698 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | |||||||
| CVE-2026-66301 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | |||||||
| CVE-2026-65815 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Dynamics Business Central Information Disclosure Vulnerability | |||||||
| CVE-2026-40375 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Entra Connect Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65673 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-59115 | No | No | - | - | Critical | 9.9 | 8.6 |
| Microsoft Excel Information Disclosure Vulnerability | |||||||
| CVE-2026-68802 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-68808 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-68813 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70318 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70327 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-70328 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-68797 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-68799 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Excel Remote Code Execution Vulnerability | |||||||
| CVE-2026-65807 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-68793 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68794 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-68795 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68796 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68800 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68807 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68806 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68810 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68811 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68815 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68816 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-68798 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68801 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68803 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68804 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-68805 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68812 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68814 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-68817 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Exchange Server Denial of Service Vulnerability | |||||||
| CVE-2026-62912 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Exchange Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62910 | No | No | - | - | Important | 7.2 | 6.3 |
| CVE-2026-65813 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62911 | No | No | - | - | Critical | 8.0 | 7.0 |
| Microsoft Exchange Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-62913 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Exchange Server Security Feature Bypass Vulnerability | |||||||
| CVE-2026-62915 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Exchange Server Spoofing Vulnerability | |||||||
| CVE-2026-62914 | No | No | - | - | Important | 7.3 | 6.4 |
| Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | |||||||
| CVE-2026-59133 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | |||||||
| CVE-2026-59124 | No | No | - | - | Important | 9.8 | 8.5 |
| Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62784 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Office Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68792 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Office Graphics Component Information Disclosure Vulnerability | |||||||
| CVE-2026-63517 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62842 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-66809 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Office Graphics Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-63513 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-63519 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-65664 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-63526 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-66807 | No | No | - | - | Critical | 7.8 | 6.8 |
| Microsoft Office Information Disclosure Vulnerability | |||||||
| CVE-2026-70315 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70314 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70317 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70323 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-63524 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-63529 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-64899 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Office Remote Code Execution Vulnerability | |||||||
| CVE-2026-63515 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-65657 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-65656 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65661 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-63532 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-63533 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64898 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-64903 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-64904 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64909 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-64910 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-64911 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-70130 | No | No | - | - | Critical | 8.4 | 7.3 |
| Microsoft Office SharePoint Spoofing Vulnerability | |||||||
| CVE-2026-57105 | No | No | - | - | Important | 8.0 | 7.0 |
| CVE-2026-70306 | No | No | - | - | Important | 9.3 | 8.1 |
| CVE-2026-70332 | No | No | - | - | Critical | 9.6 | 8.3 |
| Microsoft Office Word Information Disclosure Vulnerability | |||||||
| CVE-2026-63521 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70319 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-63528 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-63530 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-63531 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-64917 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-66806 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-66810 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Office Word Remote Code Execution Vulnerability | |||||||
| CVE-2026-63518 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-70311 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-63525 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-63527 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64905 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-64907 | No | No | - | - | Critical | 7.8 | 6.8 |
| CVE-2026-64915 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65680 | No | No | - | - | Important | 6.7 | 5.8 |
| Microsoft Outlook Remote Code Execution Vulnerability | |||||||
| CVE-2026-70329 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Outlook Spoofing Vulnerability | |||||||
| CVE-2026-62882 | No | No | - | - | Important | 4.3 | 3.8 |
| Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-63508 | No | No | - | - | Critical | 10.0 | 8.7 |
| Microsoft PowerPoint Remote Code Execution Vulnerability | |||||||
| CVE-2026-70313 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft PowerShell Remote Code Execution Vulnerability | |||||||
| CVE-2026-70337 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft PowerShell Security Feature Bypass Vulnerability | |||||||
| CVE-2026-70338 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Purview eDiscovery Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-65668 | No | No | - | - | Critical | 8.8 | 7.7 |
| Microsoft QUIC Information Disclosure Vulnerability | |||||||
| CVE-2026-62898 | No | No | - | - | Important | 7.5 | 6.5 |
| Microsoft QUIC Remote Code Execution Vulnerability | |||||||
| CVE-2026-62815 | No | No | - | - | Critical | 9.8 | 8.5 |
| Microsoft Remote Registry Service Denial of Service Vulnerability | |||||||
| CVE-2026-59138 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-61345 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft SharePoint Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70324 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SharePoint Remote Code Execution Vulnerability | |||||||
| CVE-2026-70321 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SharePoint Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62827 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-70355 | No | No | - | - | Important | 7.3 | 7.3 |
| CVE-2026-64921 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-70326 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SharePoint Server Information Disclosure Vulnerability | |||||||
| CVE-2026-62837 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft SharePoint Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-63514 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-63520 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-65658 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-65663 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-65665 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-64901 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-66805 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-66808 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft SharePoint Server Spoofing Vulnerability | |||||||
| CVE-2026-62829 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-63516 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-64922 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-65660 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-64897 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-64900 | No | No | - | - | Important | 7.3 | 6.4 |
| CVE-2026-64902 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-64916 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-58639 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62839 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62917 | No | No | - | - | Important | 4.6 | 4.0 |
| Microsoft SharePoint Server Tampering Vulnerability | |||||||
| CVE-2026-63512 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Teams Elevation of Privilege Vulnerability (no customer action required) |
|||||||
| CVE-2026-62896 | No | No | - | - | Critical | 9.6 | 8.3 |
| CVE-2026-65667 | No | No | - | - | Critical | 10.0 | 8.7 |
| Microsoft Teams Remote Code Execution Vulnerability | |||||||
| CVE-2026-65768 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Teams Spoofing Vulnerability (no customer action required) |
|||||||
| CVE-2026-62918 | No | No | - | - | Critical | 7.5 | 6.5 |
| Microsoft Teams for Android and iOS Spoofing Vulnerability | |||||||
| CVE-2026-65767 | No | No | - | - | Important | 8.8 | 7.7 |
| Microsoft Teams iOS Information Disclosure Vulnerability | |||||||
| CVE-2026-65769 | No | No | - | - | Important | 6.5 | 5.7 |
| Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-66804 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Windows Search Component Information Disclosure Vulnerability | |||||||
| CVE-2026-59135 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65814 | No | No | - | - | Important | 7.8 | 6.8 |
| Microsoft Word Information Disclosure Vulnerability | |||||||
| CVE-2026-70310 | No | No | - | - | Important | 5.5 | 4.8 |
| Microsoft Word Remote Code Execution Vulnerability | |||||||
| CVE-2026-58651 | No | No | - | - | Important | 7.8 | 6.8 |
| Power BI Remote Code Execution Vulnerability | |||||||
| CVE-2026-65811 | No | No | - | - | Important | 8.8 | 7.7 |
| PowerShell Elevation of Privilege Vulnerability | |||||||
| CVE-2026-59119 | No | No | - | - | Important | 7.3 | 6.4 |
| PowerShell Information Disclosure Vulnerability | |||||||
| CVE-2026-58612 | No | No | - | - | Important | 7.4 | 6.4 |
| Powerpoint Information Disclosure Vulnerability | |||||||
| CVE-2026-68809 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70312 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70316 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70325 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70320 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-70322 | No | No | - | - | Important | 5.5 | 4.8 |
| RPC Runtime Library Remote Code Execution Vulnerability | |||||||
| CVE-2026-62781 | No | No | - | - | Important | 8.1 | 7.1 |
| Remote Access API Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65671 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65672 | No | No | - | - | Important | 7.8 | 6.8 |
| Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-42976 | No | No | - | - | Important | 7.8 | 6.8 |
| Remote Desktop Client Remote Code Execution Vulnerability | |||||||
| CVE-2026-59134 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-61352 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-61363 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-62824 | No | No | - | - | Critical | 8.8 | 7.7 |
| Remote Procedure Call Denial of Service Vulnerability | |||||||
| CVE-2026-54113 | No | No | - | - | Important | 7.5 | 6.5 |
| Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | |||||||
| CVE-2026-59125 | No | No | - | - | Important | 7.0 | 6.1 |
| Visual Studio Code Information Disclosure Vulnerability | |||||||
| CVE-2026-47285 | No | No | - | - | Important | 6.5 | 5.7 |
| Visual Studio Code Python Extension Security Feature Bypass Vulnerability | |||||||
| CVE-2026-54981 | No | No | - | - | Important | 7.8 | 6.8 |
| Visual Studio Code Remote Code Execution Vulnerability | |||||||
| CVE-2026-59113 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-69320 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-70336 | No | No | - | - | Important | 8.8 | 7.7 |
| Visual Studio Code Security Feature Bypass Vulnerability | |||||||
| CVE-2026-58650 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69278 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-69306 | No | No | - | - | Important | 8.2 | 7.1 |
| Win32k Information Disclosure Vulnerability | |||||||
| CVE-2026-62746 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62798 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62743 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62786 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61358 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62818 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Active Directory Domain Services Remote Code Execution Vulnerability | |||||||
| CVE-2026-49179 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61348 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-68820 | No | Yes | - | - | Important | 7.0 | 6.1 |
| CVE-2026-70307 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Autopilot Elevation of Privilege Vulnerability | |||||||
| CVE-2026-65783 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65779 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65780 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65778 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65782 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65781 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Backup Engine Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62908 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Bind Filter Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61927 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-61934 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62705 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62722 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62713 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62771 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62728 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62772 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | |||||||
| CVE-2026-62775 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | |||||||
| CVE-2026-72971 | Yes | No | - | - | Important | 5.5 | 4.8 |
| Windows DHCP Client Denial of Service Vulnerability | |||||||
| CVE-2026-65785 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows DHCP Client Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62755 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62736 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows DHCP Client Remote Code Execution Vulnerability | |||||||
| CVE-2026-61361 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows DHCP Server Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62812 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62761 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62776 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62803 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62807 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows DHCP Server Information Disclosure Vulnerability | |||||||
| CVE-2026-62718 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62715 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62716 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62742 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62745 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62720 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62714 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-62814 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows DHCP Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-62823 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows DNS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-70304 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-70330 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-62769 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-62778 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-62881 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-62883 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-65795 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-65797 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-65799 | No | No | - | - | Important | 6.7 | 5.8 |
| CVE-2026-65798 | No | No | - | - | Important | 6.7 | 5.8 |
| Windows DNS Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-62787 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-62817 | No | No | - | - | Critical | 8.8 | 7.7 |
| CVE-2026-62820 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-62878 | No | No | - | - | Critical | 9.8 | 8.5 |
| CVE-2026-65789 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-61920 | No | No | - | - | Important | 6.6 | 5.8 |
| Windows DWM Core Library Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61932 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62894 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62888 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows DWM Core Library Information Disclosure Vulnerability | |||||||
| CVE-2026-61933 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62703 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Defender Firewall Service Security Feature Bypass Vulnerability | |||||||
| CVE-2026-61936 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-62893 | No | No | - | - | Critical | 9.8 | 8.5 |
| Windows Device Association Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62747 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62710 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | |||||||
| CVE-2026-66802 | No | No | - | - | Critical | 8.1 | 7.1 |
| CVE-2026-71331 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows Display Enhancement Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61923 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Encrypting File System (EFS) Information Disclosure Vulnerability | |||||||
| CVE-2026-59128 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Event Logging Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-59126 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Event Logging Service Information Disclosure Vulnerability | |||||||
| CVE-2026-59137 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-61347 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows GDI Information Disclosure Vulnerability | |||||||
| CVE-2026-65662 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-61360 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows GDI+ Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62890 | No | No | - | - | Critical | 7.8 | 6.8 |
| Windows GDI+ Information Disclosure Vulnerability | |||||||
| CVE-2026-62709 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows GDI+ Remote Code Execution Vulnerability | |||||||
| CVE-2026-62822 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Graphics Kernel Denial of Service Vulnerability | |||||||
| CVE-2026-62702 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows Graphics Kernel Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61346 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62774 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows HTTP Protocol Stack Tampering Vulnerability | |||||||
| CVE-2026-62750 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows HTTP.sys Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61937 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62753 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62735 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62739 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62741 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62811 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Hello Tampering Vulnerability | |||||||
| CVE-2026-61928 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Hyper-V Information Disclosure Vulnerability | |||||||
| CVE-2026-61368 | No | No | - | - | Important | 5.0 | 4.4 |
| Windows Imaging Component Information Disclosure Vulnerability | |||||||
| CVE-2026-62740 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Imaging Component Remote Code Execution Vulnerability | |||||||
| CVE-2026-54984 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Installer Elevation of Privilege Vulnerability | |||||||
| CVE-2026-59127 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61925 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70344 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70345 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70346 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-70347 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61938 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62768 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65774 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Kerberos Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62754 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62766 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62773 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62752 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Kernel Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61930 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62737 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61929 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62708 | No | No | - | - | Important | 6.4 | 5.6 |
| CVE-2026-62749 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62780 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62788 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-65773 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Key Guard Elevation of Privilege Vulnerability | |||||||
| CVE-2026-66799 | No | No | - | - | Critical | 7.8 | 6.8 |
| Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | |||||||
| CVE-2026-62785 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-62795 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-50472 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows License Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62777 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows MIDI Service Module Elevation of Privileges Vulnerability | |||||||
| CVE-2026-62688 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62693 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Management Instrumentation Information Disclosure Vulnerability | |||||||
| CVE-2026-62738 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Management Services Denial of Service Vulnerability | |||||||
| CVE-2026-70348 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Message Queuing Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62719 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62717 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65790 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62707 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows NTFS Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62797 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62700 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62880 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows NTFS Information Disclosure Vulnerability | |||||||
| CVE-2026-61350 | No | No | - | - | Important | 4.6 | 4.0 |
| CVE-2026-62796 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-65784 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62793 | No | No | - | - | Important | 5.5 | 4.8 |
| CVE-2026-62887 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Narrator Braille Elevation of Privilege Vulnerability | |||||||
| CVE-2026-56174 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Network Address Translation (NAT) Spoofing Vulnerability | |||||||
| CVE-2026-56179 | No | No | - | - | Moderate | 8.3 | 7.2 |
| Windows Network Connection Broker Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61366 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Network File System Denial of Service Vulnerability | |||||||
| CVE-2026-68819 | No | No | - | - | Important | 5.9 | 5.2 |
| Windows Package Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-68821 | No | No | - | - | Important | 7.3 | 6.4 |
| Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62696 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Projected File System Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62751 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Push Notifications Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62690 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62816 | No | No | - | - | Critical | 8.8 | 7.7 |
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62783 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62758 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Remote Desktop Client Information Disclosure Vulnerability | |||||||
| CVE-2026-61924 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-61918 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-61921 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows Remote Desktop Services Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61356 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61367 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62692 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61364 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61365 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62819 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows SMB Client Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62799 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows SMB Client Information Disclosure Vulnerability | |||||||
| CVE-2026-62782 | No | No | - | - | Important | 6.5 | 5.7 |
| CVE-2026-65794 | No | No | - | - | Important | 6.5 | 5.7 |
| Windows SMBv3 Server Remote Code Execution Vulnerability | |||||||
| CVE-2026-62800 | No | No | - | - | Important | 8.8 | 7.7 |
| CVE-2026-62790 | No | No | - | - | Important | 8.8 | 7.7 |
| Windows Schannel Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62779 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Schannel Security Feature Bypass Vulnerability | |||||||
| CVE-2026-62757 | No | No | - | - | Important | 5.3 | 4.6 |
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62889 | No | No | - | - | Critical | 8.1 | 7.1 |
| Windows Sensor Data Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61355 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Shell Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62770 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Storage Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62695 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-61359 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows TCP/IP Denial of Service Vulnerability | |||||||
| CVE-2026-59132 | No | No | - | - | Important | 7.5 | 6.5 |
| Windows TCP/IP Remote Code Execution Vulnerability | |||||||
| CVE-2026-62792 | No | No | - | - | Important | 8.1 | 7.1 |
| Windows Telephony Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61353 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62723 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62724 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62748 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62729 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-59122 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62701 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62725 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62726 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62732 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62734 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows USB Driver Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61926 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | |||||||
| CVE-2026-62699 | No | No | - | - | Important | 6.8 | 5.9 |
| Windows User Profile Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62832 | Yes | No | - | - | Important | 7.8 | 6.8 |
| Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62721 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows Win32k Elevation of Privilege Vulnerability | |||||||
| CVE-2026-62712 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62876 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62877 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65678 | No | No | - | - | Important | 7.0 | 6.1 |
| CVE-2026-62711 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62733 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-62885 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65775 | No | No | - | - | Important | 7.8 | 6.8 |
| CVE-2026-65776 | No | No | - | - | Important | 7.0 | 6.1 |
| Windows Wired AutoConfig Service Information Disclosure Vulnerability | |||||||
| CVE-2026-62730 | No | No | - | - | Important | 5.5 | 4.8 |
| Windows Work Folder Service Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61349 | No | No | - | - | Important | 7.8 | 6.8 |
| Windows iSCSI Target Service Denial of Service Vulnerability | |||||||
| CVE-2026-65681 | No | No | - | - | Important | 7.5 | 6.5 |
| CVE-2026-65796 | No | No | - | - | Important | 5.9 | 5.2 |
| Windows iSCSI Target Service Remote Code Execution Vulnerability | |||||||
| CVE-2026-65679 | No | No | - | - | Important | 8.1 | 7.1 |
| CVE-2026-65791 | No | No | - | - | Critical | 9.8 | 8.5 |
| Winlogon Elevation of Privilege Vulnerability | |||||||
| CVE-2026-61939 | No | No | - | - | Important | 7.0 | 6.1 |
Comments