Patch TuesdayMicrosoft's monthly security release, by update and product, as the Security Update Guide states it. Nothing is generated.
Your Windows releases from the fleet
- Windows 11, version 26H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711)
- Windows 11, version 25H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711), KB5124008 (20 CVEs · build 10.0.26200.9445), KB5101650 (2 CVEs · build 10.0.26200.8875)
- Windows 11, version 24H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711), KB5124008 (20 CVEs · build 10.0.26200.9445), KB5101650 (2 CVEs · build 10.0.26200.8875)
- Windows 11, version 23H2 — KB5126653 (965 CVEs, 1 exploited · build 10.0.22631.7652), KB5122880 (9 CVEs · build 10.0.22631.7582), KB5099414 (1 CVEs · build 10.0.22631.7376)
By update 150 in October 2026
| Update | Products | CVEs | Critical | Exploited |
|---|---|---|---|---|
| KB5127648 · 10.0.26100.9711 | Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 Version 26H2 | 3025 | 75 | 3 |
| KB5126657 · 10.0.19044.7807 | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 | 1798 | 44 | 2 |
| KB5126646 · 10.0.26100.33650 | Windows Server 2025, Windows Server 2025 (Server Core installation) | 1041 | 35 | 1 |
| KB5127646 · 10.0.28000.3231 | Windows 11 Version 26H1, Windows 11 version 26H1 | 997 | 25 | 1 |
| KB5126655 · 10.0.20348.5761 | Windows Server 2022, Windows Server 2022 (Server Core installation) | 977 | 33 | 1 |
| KB5126653 · 10.0.22631.7652 | Windows 11 Version 23H2 | 965 | 25 | 1 |
| KB5126651 · 10.0.17763.9376 | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation) | 918 | 30 | 1 |
| KB5126868 · 10.0.14393.9612 | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 | 770 | 27 | 1 |
| KB5126836 · 6.3.9600.23470 | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | 649 | 23 | 1 |
| Release Notes · 20260925.100 | Outlook.com, azl3 brotli 1.1.0-2 on Azure Linux 3.0, azl3 nodejs 24.21.0-1 on Azure Linux 3.0, Raw Image Extension on Windows 10 Version 1607, Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems, Raw Image Extension on Windows 10 and 28 more | 23 | 8 | 1 |
| Release Notes · 154.0.4258.62 | Microsoft Edge (Chromium-based) | 19 | 2 | 1 |
| KB5126835 · 6.2.9200.26434 | Windows Server 2012, Windows Server 2012 (Server Core installation) | 612 | 21 | |
| Release Notes · 16.0.14334.20974 | Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions | 310 | 68 | |
| Release Notes · https://aka.ms/OfficeSecurityReleases | Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems | 162 | 37 | |
| Release Notes · 16.114.26101123 | Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac | 114 | 30 | |
| Release Notes · 18.11.2 | Microsoft Visual Studio 2026 version 18.11, Microsoft Visual Studio 2026 version 18.12, Microsoft Visual Studio 2026 version 18.10 | 51 | 4 | |
| Release Notes · 17.14.43 | Microsoft Visual Studio 2022 version 17.14 | 46 | 3 | |
| KB5002928 · 16.0.10417.20228 | Office Online Server | 44 | 13 | |
| KB5002927 · 16.0.20326.20190 | Microsoft SharePoint Server Subscription Edition | 36 | 2 | |
| Release Notes · 11.0.100-rc.3.26522.148 | .NET 11.0 installed on Windows, .NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 runtime installed on Windows, ASP.NET Core 11.0, .NET 11.0 runtime installed on Linux and 1 more | 34 | 2 | |
| KB5130035 · 9.0.21 | .NET 9.0 runtime installed on Windows, ASP.NET Core 9.0, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Linux | 32 | 1 | |
| KB5130036 · 10.0.13 | ASP.NET Core 10.0, .NET 10.0 runtime installed on Windows, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux | 32 | ||
| KB5130034 · 8.0.32 | .NET 8.0 runtime installed on Windows, ASP.NET Core 8.0, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux | 29 | 1 | |
| KB5126934 · 16.0.4305.5 | Microsoft SQL Server 2022 for x64-based Systems (CU27) | 21 | ||
| KB5126967 · 17.0.5015.4 | Microsoft SQL Server 2025 for x64-based Systems (CU9) | 21 | ||
| KB5128492 · 17.0.1145.4 | Microsoft SQL Server 2025 for x64-based Systems (GDR) | 21 | ||
| KB5128493 · 16.0.1210.3 | Microsoft SQL Server 2022 for x64-based Systems (GDR) | 21 | ||
| KB5124008 · 10.0.26200.9445 | Windows 11 Version 25H2, Windows 11 Version 24H2 | 20 | 2 | |
| KB5128494 · 15.0.4500.2 | Microsoft SQL Server 2019 for x64-based Systems (CU32) | 19 | ||
| KB5128495 · 15.0.2200.2 | Microsoft SQL Server 2019 for x64-based Systems (GDR) | 19 | ||
| KB5127666 · 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809 | 18 | 1 | |
| KB5127689 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2 | 18 | 1 | |
| KB5127690 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 | 18 | 1 | |
| KB5127691 · 4.8.9363.0 | Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 | 18 | 1 | |
| KB5127692 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2 | 18 | 1 | |
| KB5127693 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 | 18 | 1 | |
| KB5127667 · 4.7.4150.0 | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 | 17 | 1 | |
| KB5127668 · 4.7.4150.0 | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 | 17 | 1 | |
| KB5127685 · 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 | 17 | 1 | |
| KB5127687 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 | 17 | 1 |
110 more updates, mostly single products; the CVE table below names each.
CVEs 1477 of 1477, Microsoft's own (include the 1761 republished)
All components
Microsoft Office Excel 70Role: DNS Server 52Windows Kernel 46Microsoft Office Word 45Windows Installer 38Microsoft Office SharePoint 37Windows Win32 Kernel Subsystem 36Microsoft Windows Search Component 29.NET 27Windows NTFS 26SQL Server 22Windows Error Reporting 22Windows Broadcast DVR User Service 20Remote Desktop Client 19
| CVE | Severity | CVSS | Component | Title | Update |
|---|---|---|---|---|---|
| CVE-2026-96951exploited | Important | 8.8 | Windows Shell | Windows Shell Security Feature Bypass Vulnerability | KB5126836, KB5126868, KB5126651 +11 |
| CVE-2026-111497disclosed | Critical | 8.1 | .NET | Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | Release Notes, KB5133964, KB5133965 +10 |
| CVE-2026-108398disclosed | Important | 8.8 | .NET Framework | .NET Framework Security Feature Bypass Vulnerability | KB5126868, KB5127666, KB5127685 +13 |
| CVE-2026-92707disclosed | Moderate | 5.3 | .NET | MessagePack-CSharp Denial of Service Vulnerability | Release Notes, Release Notes, Release Notes +5 |
| CVE-2026-110063 | Critical | 10.0 | VM Inspector for Azure Virtual Machines | VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability | |
| CVE-2026-83938 | Critical | 10.0 | Azure Kubernetes Configuration Service | Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability | |
| CVE-2026-96207 | Critical | 10.0 | Microsoft Partner Center | Microsoft Partner Center Elevation of Privilege Vulnerability | |
| CVE-2026-97785 | Critical | 10.0 | AAD App Proxy | AAD App Proxy Elevation of Privilege Vulnerability | |
| CVE-2026-94510 | Critical | 9.9 | Microsoft Bookings | Microsoft Bookings Elevation of Privilege Vulnerability | |
| CVE-2026-100202 | Critical | 9.8 | Windows Message Queuing Queue Manager | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-100219 | Critical | 9.8 | Microsoft QUIC | Microsoft QUIC Remote Code Execution Vulnerability | KB5126655, KB5126653, KB5127648 +4 |
| CVE-2026-105016 | Critical | 9.8 | Microsoft QUIC | Microsoft QUIC Remote Code Execution Vulnerability | KB5126655, KB5126653, KB5127648 +10 |
| CVE-2026-21413 | Critical | 9.8 | Windows Raw Image Extension | Raw Image Extension Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-70147 | Critical | 9.8 | Microsoft PostScript Printer Driver | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | KB5127648, KB5127648, KB5127648 +10 |
| CVE-2026-70153 | Critical | 9.8 | Microsoft PostScript Printer Driver | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-70242 | Critical | 9.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-70291 | Critical | 9.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70300 | Critical | 9.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-77900 | Critical | 9.8 | Azure App Service | Azure App Service Remote Code Execution Vulnerability | |
| CVE-2026-88131 | Critical | 9.8 | Microsoft Dataverse | Microsoft Dataverse Remote Code Execution Vulnerability | |
| CVE-2026-88156 | Critical | 9.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88178 | Critical | 9.8 | Microsoft Office PowerPoint | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-96934 | Critical | 9.8 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126836, KB5126868, KB5126651 +3 |
| CVE-2026-97016 | Critical | 9.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-97749 | Critical | 9.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-97814 | Critical | 9.8 | Windows Text Shaping | Windows Text Shaping Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-69435 | Critical | 9.6 | Azure SRE Agent | Azure SRE Agent Elevation of Privilege Vulnerability | |
| CVE-2026-105014 | Critical | 9.1 | Azure Pipelines | Azure Pipelines Remote Code Execution Vulnerability | |
| CVE-2026-100209 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-100210 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-100211 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-100220 | Critical | 8.8 | Windows Media Video Decoder | Windows Media Video Decoder Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102214 | Critical | 8.8 | Windows Hyper-V | Windows Hyper-V Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +8 |
| CVE-2026-102225 | Critical | 8.8 | Windows Text Shaping | Windows Text Shaping Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102855 | Critical | 8.8 | Microsoft Office Visio | Microsoft Office Visio Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-102856 | Critical | 8.8 | Microsoft Office Visio | Microsoft Office Visio Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-102857 | Critical | 8.8 | Microsoft Office Visio | Microsoft Office Visio Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105718 | Critical | 8.8 | Microsoft Office Excel | Microsoft Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-105733 | Critical | 8.8 | Windows Hyper-V | Windows Hyper-V Remote Code Execution Vulnerability | KB5126657, KB5126657, KB5126655 +6 |
| CVE-2026-108400 | Critical | 8.8 | Microsoft Windows Codecs Library | HEVC Video Extensions Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108439 | Critical | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108440 | Critical | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108467 | Critical | 8.8 | Microsoft PostScript Printer Driver | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-108471 | Critical | 8.8 | Windows Virtualization-Based Security (VBS) Enclave | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | KB5126651 |
| CVE-2026-70215 | Critical | 8.8 | Microsoft Office PowerPoint | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70250 | Critical | 8.8 | Windows DHCP Client | Windows DHCP Client Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-83934 | Critical | 8.8 | Windows GDI+ | Windows GDI+ Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-88073 | Critical | 8.8 | Windows Graphics Kernel | Windows Graphics Kernel Elevation of Privilege Vulnerability | KB5126657, KB5126657, KB5126653 +5 |
| CVE-2026-88144 | Critical | 8.8 | Microsoft Office PowerPoint | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-96202 | Critical | 8.8 | Windows Raw Image Extension | Windows Raw Image Extension Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-96913 | Critical | 8.8 | Windows Kernel | Windows Kernel Elevation of Privilege Vulnerability | KB5127648, KB5127648, KB5127648 +7 |
| CVE-2026-96914 | Critical | 8.8 | Windows Virtualization-Based Security (VBS) Enclave | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | KB5126653, KB5127648, KB5127648 +8 |
| CVE-2026-96943 | Critical | 8.8 | Windows Raw Image Extension | Windows Raw Image Extension Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-96952 | Critical | 8.8 | Microsoft Windows Media Foundation | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | KB5126651, KB5126657, KB5126657 +7 |
| CVE-2026-97739 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97741 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-97742 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97745 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-97753 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97755 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002927, Release Notes, Release Notes +3 |
| CVE-2026-97756 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97758 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97759 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-97761 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-97765 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97767 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97776 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97778 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97780 | Critical | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-83943 | Critical | 8.7 | Azure API Center | Azure API Center Information Disclosure Vulnerability | |
| CVE-2026-102866 | Critical | 8.1 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-108457 | Critical | 8.1 | Microsoft Windows PDF | Microsoft Windows PDF Remote Code Execution Vulnerability | KB5126653, KB5126657, KB5126657 +2 |
| CVE-2026-108460 | Critical | 8.1 | Windows Message Queuing | Windows Message Queuing Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-69802 | Critical | 8.1 | Network Device Enrollment Service (NDES) | Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-70187 | Critical | 8.1 | Remote Desktop Gateway Service | Windows Remote Desktop Services Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-70229 | Critical | 8.1 | Active Directory Domain Services | Windows Active Directory Domain Services Remote Code Execution Vulnerability | KB5127648, KB5126835, KB5126836 +10 |
| CVE-2026-70269 | Critical | 8.1 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70571 | Critical | 8.1 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | KB5128896, KB5128895, KB5128898 +1 |
| CVE-2026-88117 | Critical | 8.1 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-88119 | Critical | 8.1 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-88120 | Critical | 8.1 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-88171 | Critical | 8.1 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-88174 | Critical | 8.1 | Windows Deployment Services | Windows Deployment Services Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-88185 | Critical | 8.1 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-100215 | Critical | 7.8 | Microsoft Graphics Component | Microsoft Graphics Component Remote Code Execution Vulnerability | KB5127648, KB5126646, KB5127646 +9 |
| CVE-2026-108130 | Critical | 7.8 | Windows Virtualization-Based Security (VBS) Enclave | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | KB5127648, KB5127648, KB5127648 +2 |
| CVE-2026-88074 | Critical | 7.8 | Windows Virtualization-Based Security (VBS) Enclave | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | KB5126653, KB5127648, KB5127648 +2 |
| CVE-2026-108456 | Critical | 7.7 | Azure AI Foundry | Azure AI Foundry Elevation of Privilege Vulnerability | |
| CVE-2026-83947 | Critical | 7.7 | Azure Event Grid | Azure Event Grid Spoofing Vulnerability | |
| CVE-2026-108131 | Critical | 7.5 | Active Directory Federation Services (AD FS) | Active Directory Federation Services (AD FS) Spoofing Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-108448 | Critical | 7.5 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-69789 | Critical | 7.5 | Reliable Multicast Transport Driver (RMCAST) | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | KB5122876, KB5122882, KB5122878 +9 |
| CVE-2026-88207 | Critical | 7.5 | Microsoft Office PowerPoint | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-96185 | Critical | 7.5 | Microsoft Exchange Online | Microsoft Exchange Online Remote Code Execution Vulnerability | |
| CVE-2026-96222 | Critical | 7.4 | Active Directory Federation Services (AD FS) | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Release Notes, KB5126651, KB5126655 +21 |
| CVE-2026-108399 | Critical | 7.2 | Windows Hyper-V | Windows Hyper-V Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-102211 | Critical | 7.0 | Windows Virtualization-Based Security (VBS) Enclave | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | KB5126868, KB5126651, KB5126657 +8 |
| CVE-2026-83917 | Critical | 7.0 | Windows ALPC | Windows ALPC Elevation of Privilege Vulnerability | KB5127648, KB5126646, KB5127646 +7 |
| CVE-2026-62840 | Critical | — | Linux Kernel | Linux Kernel Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-100222 | Important | 9.8 | Network Policy Server (NPS) | Network Policy Server (NPS) Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102210 | Important | 9.8 | Windows Text Shaping | Windows Text Shaping Remote Code Execution Vulnerability | KB5126651, KB5126657, KB5126657 +7 |
| CVE-2026-105010 | Important | 9.8 | Microsoft Windows Search Component | Microsoft Windows Search Component Elevation of Privilege Vulnerability | KB5126836, KB5126868, KB5126651 +9 |
| CVE-2026-69634 | Important | 9.8 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-69639 | Important | 9.8 | Windows Libarchive | Windows libarchive Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-69705 | Important | 9.8 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-69883 | Important | 9.8 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-69886 | Important | 9.8 | Windows Imaging Component | Windows Imaging Component Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70024 | Important | 9.8 | Windows Internet Information Services | Windows Internet Information Services Remote Code Execution Vulnerability | KB5126646, KB5127646, KB5126657 +10 |
| CVE-2026-70096 | Important | 9.8 | Windows Rich Text Edit Control | Windows Rich Text Edit Control Remote Code Execution Vulnerability | KB5127648, Release Notes, Release Notes +14 |
| CVE-2026-70157 | Important | 9.8 | Windows System Information Console | Windows System Information Console Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83517 | Important | 9.8 | Microsoft Windows Media Foundation | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83519 | Important | 9.8 | Windows Error Reporting | Windows Error Reporting Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83578 | Important | 9.8 | Windows PowerShell | Microsoft PowerShell Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83693 | Important | 9.8 | Windows Error Reporting | Windows Error Reporting Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83748 | Important | 9.8 | Windows Error Reporting | Windows Error Reporting Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83770 | Important | 9.8 | Windows Text Shaping | Windows Text Shaping Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83780 | Important | 9.8 | Windows CCFFilter Driver | Windows CCFFilter Driver Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +1 |
| CVE-2026-83782 | Important | 9.8 | Windows Shell | Windows Shell Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83869 | Important | 9.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83910 | Important | 9.8 | RPC Runtime | RPC Runtime Library Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83935 | Important | 9.8 | Microsoft XML | Microsoft XML Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-84015 | Important | 9.8 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85792 | Important | 9.8 | Windows Routing and Remote Access Service (RRAS) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85806 | Important | 9.8 | Network Policy Server (NPS) | Network Policy Server (NPS) Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85809 | Important | 9.8 | Windows Routing and Remote Access Service (RRAS) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85814 | Important | 9.8 | Microsoft Windows Media Foundation | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85928 | Important | 9.8 | Windows Volume Manager Extension Driver | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-88102 | Important | 9.8 | Windows Failover Cluster | Microsoft Failover Cluster Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 |
| CVE-2026-96096 | Important | 9.8 | Windows Media Player | Windows Media Player Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-96113 | Important | 9.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126836, KB5126868, KB5126651 +3 |
| CVE-2026-96219 | Important | 9.8 | Windows Local Security Authority Subsystem Service (LSASS) | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | KB5127646, KB5126651, KB5126657 +7 |
| CVE-2026-96320 | Important | 9.8 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-96864 | Important | 9.8 | Microsoft Failover Cluster Virtual Driver | Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-96909 | Important | 9.8 | Windows BitLocker | Windows BitLocker Remote Code Execution Vulnerability | KB5126655, KB5126653, KB5127648 +4 |
| CVE-2026-96924 | Important | 9.8 | Windows OLE | Windows OLE Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-97805 | Important | 9.8 | Windows Partition Management Driver | Windows Partition Management Driver Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-97815 | Important | 9.8 | Windows Error Reporting | Windows Error Reporting Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-97816 | Important | 9.8 | OpenSSH for Windows | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | KB5126651, KB5126657, KB5126657 +7 |
| CVE-2026-102238 | Important | 9.6 | Visual Studio Code | Visual Studio Code Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-88092 | Important | 9.4 | ASP.NET Core | ASP.NET Core Tampering Vulnerability | Release Notes, Release Notes, KB5130034 +3 |
| CVE-2026-70279 | Important | 9.3 | Microsoft Exchange Server | Microsoft Exchange Server Spoofing Vulnerability | KB5128896, KB5128897, KB5128898 +1 |
| CVE-2026-70188 | Important | 9.1 | ASP.NET Core | ASP.NET Core Security Feature Bypass Vulnerability | Release Notes, Release Notes, Release Notes +3 |
| CVE-2026-96252 | Important | 9.1 | Active Directory Federation Services (AD FS) | Active Directory Federation Services (AD FS) Spoofing Vulnerability | KB5126835, KB5126836, KB5126868 +3 |
| CVE-2026-105008 | Important | 9.0 | Windows Schannel | Windows Schannel Spoofing Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-85818 | Important | 9.0 | Windows Schannel | Windows Schannel Spoofing Vulnerability | KB5127648, KB5126655, KB5126646 +4 |
| CVE-2026-100212 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-100214 | Important | 8.8 | Dynamics Business Central | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-102203 | Important | 8.8 | RPC Runtime | RPC Runtime Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102217 | Important | 8.8 | WebDAV | WebDAV Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102226 | Important | 8.8 | Dynamics Business Central | Dynamics Business Central Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-102235 | Important | 8.8 | Visual Studio Code | Visual Studio Code Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-102849 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-102850 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-102858 | Important | 8.8 | Microsoft Office OneNote | Microsoft Office OneNote Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-102860 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-102861 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-102862 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-102863 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-102869 | Important | 8.8 | .NET and Visual Studio | .NET and Visual Studio Elevation of Privilege Vulnerability | Release Notes, Release Notes, KB5126868 +15 |
| CVE-2026-102870 | Important | 8.8 | ASP.NET Core | ASP.NET Core Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +7 |
| CVE-2026-103572 | Important | 8.8 | Visual Studio Tools for Applications and SQL Server Management Studio | Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-103575 | Important | 8.8 | Remote Desktop Client | Remote Desktop Client Remote Code Execution Vulnerability | KB5127648, KB5127648, KB5127648 +10 |
| CVE-2026-105007 | Important | 8.8 | Windows NDIS | Windows NDIS Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-105591 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105593 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105595 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105596 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105597 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105598 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105716 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105717 | Important | 8.8 | Microsoft Office Access | Microsoft Office Access Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-105727 | Important | 8.8 | Dynamics Business Central | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-108426 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108427 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108428 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108429 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108430 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108431 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108432 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108437 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108441 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108442 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108443 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108444 | Important | 8.8 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108445 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108446 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-108447 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108449 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-108450 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108451 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-108452 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-108458 | Important | 8.8 | Remote Desktop Client | Remote Desktop Client Remote Code Execution Vulnerability | KB5127648, KB5126657, KB5127648 +9 |
| CVE-2026-108463 | Important | 8.8 | Windows SmartScreen | Windows SmartScreen Security Feature Bypass Vulnerability | KB5127648, KB5127648, KB5127648 +1 |
| CVE-2026-65674 | Important | 8.8 | SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | KB5126934, KB5126967, KB5128495 +3 |
| CVE-2026-69326 | Important | 8.8 | Graphic Fonts | Graphic Fonts Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-69370 | Important | 8.8 | Visual Studio Code | Visual Studio Code Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-69521 | Important | 8.8 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5122876, KB5122882, KB5122878 +9 |
| CVE-2026-69765 | Important | 8.8 | Windows Storport Miniport Driver | Windows Storport Miniport Driver Remote Code Execution Vulnerability | KB5126646 |
| CVE-2026-69918 | Important | 8.8 | Windows Core Messaging | Windows Core Messaging Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +8 |
| CVE-2026-69943 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-69945 | Important | 8.8 | Windows AppX Deployment Extensions | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | KB5126655, KB5126657, KB5126657 +6 |
| CVE-2026-69985 | Important | 8.8 | Windows Libarchive | Windows libarchive Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +7 |
| CVE-2026-70007 | Important | 8.8 | .NET Framework | .NET Framework Remote Code Execution Vulnerability | KB5127660, KB5127664, KB5130034 +21 |
| CVE-2026-70035 | Important | 8.8 | .NET Framework | .NET Framework Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +21 |
| CVE-2026-70068 | Important | 8.8 | Windows Client-Side Caching (CSC) Service | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | KB5127648, KB5127648, KB5127648 +10 |
| CVE-2026-70069 | Important | 8.8 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-70089 | Important | 8.8 | Windows GDI | Windows GDI Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70098 | Important | 8.8 | Visual Studio Code | Visual Studio Code Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-70149 | Important | 8.8 | Windows Client Side Caching driver (csc.sys) | Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-70158 | Important | 8.8 | Windows Routing and Remote Access Service (RRAS) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70167 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126655, KB5126646 |
| CVE-2026-70174 | Important | 8.8 | .NET | .NET Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +21 |
| CVE-2026-70185 | Important | 8.8 | Windows PowerShell | Microsoft PowerShell Security Feature Bypass Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-70210 | Important | 8.8 | Windows OLE DB | Windows OLE DB Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70246 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-70254 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70256 | Important | 8.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes |
| CVE-2026-70257 | Important | 8.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-70258 | Important | 8.8 | Microsoft Windows Media Foundation | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70262 | Important | 8.8 | WebDAV | WebDAV Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70266 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-70268 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70275 | Important | 8.8 | Windows CD-ROM Driver | Windows CD-ROM File System Driver Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70282 | Important | 8.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-70287 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70297 | Important | 8.8 | Skype for Business and Microsoft Lync | Skype for Business Remote Code Execution Vulnerability | KB5131692, KB5132779, KB5131693 |
| CVE-2026-70299 | Important | 8.8 | Windows Bind Filter Driver | Windows Bind Filter Driver Elevation of Privilege Vulnerability | KB5126646, KB5126653 |
| CVE-2026-70301 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70302 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-70343 | Important | 8.8 | Microsoft MPEG-2 Video Extension | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | Store App |
| CVE-2026-70580 | Important | 8.8 | Windows Credential Guard | Windows Credential Guard Spoofing Vulnerability | KB5127648, KB5126651, KB5126655 +7 |
| CVE-2026-77496 | Important | 8.8 | Windows Imaging Component | Windows Imaging Component Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-77902 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-77910 | Important | 8.8 | Microsoft Exchange Server | Microsoft Exchange Server Elevation of Privilege Vulnerability | KB5128895, KB5128896, KB5128897 +1 |
| CVE-2026-83520 | Important | 8.8 | .NET | .NET Remote Code Execution Vulnerability | Release Notes, KB5127689, KB5127690 +21 |
| CVE-2026-83523 | Important | 8.8 | Windows Image Acquisition | Windows Image Acquisition Remote Code Execution Vulnerability | KB5127648, KB5126646, KB5127648 +2 |
| CVE-2026-83642 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83643 | Important | 8.8 | Windows Error Reporting | Windows Error Reporting Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83688 | Important | 8.8 | Remote Desktop Client | Remote Desktop Client Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83716 | Important | 8.8 | Windows Hyper-V | Windows Hyper-V Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +8 |
| CVE-2026-83725 | Important | 8.8 | Microsoft Windows Search Component | Microsoft Windows Search Component Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83728 | Important | 8.8 | Windows Hyper-V | Windows Hyper-V Spoofing Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83759 | Important | 8.8 | Windows Encrypting File System (EFS) | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +8 |
| CVE-2026-83771 | Important | 8.8 | Windows Camera Frame Server Monitor | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | KB5126655, KB5126646, KB5127648 +4 |
| CVE-2026-83777 | Important | 8.8 | Windows Bluetooth Service | Windows Bluetooth Service Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +8 |
| CVE-2026-83778 | Important | 8.8 | Microsoft Internet Messaging API | Microsoft Internet Messaging API Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83784 | Important | 8.8 | Windows Encrypting File System (EFS) | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83789 | Important | 8.8 | Windows SMB Client | Windows SMB Client Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83797 | Important | 8.8 | Windows Partition Management Driver | Windows Partition Management Driver Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-83831 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-83851 | Important | 8.8 | Windows Partition Management Driver | Windows Partition Management Driver Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-83862 | Important | 8.8 | Windows Network Load Balancing | Windows Network Load Balancing Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-83874 | Important | 8.8 | Windows Event Tracing | Windows Event Tracing Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83889 | Important | 8.8 | Role: DNS Server | Windows DNS Server Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-83891 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-83923 | Important | 8.8 | OpenSSH for Windows | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-83928 | Important | 8.8 | Windows Local Security Authority Subsystem Service (LSASS) | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83929 | Important | 8.8 | Windows GDI | Windows GDI Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +9 |
| CVE-2026-85339 | Important | 8.8 | Windows Routing and Remote Access Service (RRAS) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85363 | Important | 8.8 | .NET Framework | .NET Framework Elevation of Privilege Vulnerability | Release Notes, Release Notes, KB5130036 +21 |
| CVE-2026-85817 | Important | 8.8 | Windows PowerShell | Microsoft PowerShell Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85890 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-85897 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-85898 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-85900 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-85903 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-85905 | Important | 8.8 | Windows UI Immersive Server | Windows UI Immersive Server API Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85931 | Important | 8.8 | Windows Distributed File System (DFS) | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85936 | Important | 8.8 | Windows Shell | Windows Shell Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-87697 | Important | 8.8 | .NET | .NET Remote Code Execution Vulnerability | Release Notes, KB5130036, KB5130034 +3 |
| CVE-2026-88075 | Important | 8.8 | Microsoft Configuration Manager | Configuration Manager Elevation of Privilege Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-88077 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-88112 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +9 |
| CVE-2026-88114 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +8 |
| CVE-2026-88115 | Important | 8.8 | Windows Server for NFS | Windows Server for NFS Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-88116 | Important | 8.8 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +8 |
| CVE-2026-88136 | Important | 8.8 | WebDAV | Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-88142 | Important | 8.8 | Windows Background Intelligent Transfer Service (BITS) | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-88145 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88150 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88155 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-88157 | Important | 8.8 | OpenSSH for Windows | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-88159 | Important | 8.8 | Windows Background Intelligent Transfer Service (BITS) | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-88163 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-88164 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-88165 | Important | 8.8 | Active Directory Domain Services | Windows Active Directory Domain Services Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-88166 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Remote Code Execution Vulnerability | KB5002927 |
| CVE-2026-88186 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88196 | Important | 8.8 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88197 | Important | 8.8 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88198 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-88200 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-88202 | Important | 8.8 | Microsoft Office Word | Microsoft Office Word Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-88219 | Important | 8.8 | RPC Runtime | RPC Runtime Library Remote Code Execution Vulnerability | KB5126646, KB5127646, KB5126835 +10 |
| CVE-2026-94512 | Important | 8.8 | SQL Server | SQL Server Remote Code Execution Vulnerability | KB5126934, KB5126967, KB5128497 +5 |
| CVE-2026-96044 | Important | 8.8 | Microsoft Office SharePoint | Microsoft Office SharePoint Elevation of Privilege Vulnerability | KB5002927 |
| CVE-2026-96192 | Important | 8.8 | Microsoft Edge for iOS | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-96196 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | Release Notes |
| CVE-2026-96198 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-96199 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-96203 | Important | 8.8 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-96224 | Important | 8.8 | .NET | .NET Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +21 |
| CVE-2026-96230 | Important | 8.8 | ASP.NET Core | ASP.NET Core Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +3 |
| CVE-2026-96235 | Important | 8.8 | .NET | .NET Remote Code Execution Vulnerability | KB5130036, KB5130034, KB5130035 +3 |
| CVE-2026-96251 | Important | 8.8 | Microsoft PowerShell | Microsoft PowerShell Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-96917 | Important | 8.8 | Windows PCI Bus Driver | Windows PCI Bus Driver Elevation of Privilege Vulnerability | KB5126651, KB5126657, KB5126657 +7 |
| CVE-2026-96940 | Important | 8.8 | Microsoft Exchange Server | Microsoft Exchange Server Elevation of Privilege Vulnerability | KB5129957, KB5129958, KB5129955 +1 |
| CVE-2026-96957 | Important | 8.8 | .NET | .NET Security Feature Bypass Vulnerability | KB5130036, Release Notes, Release Notes +1 |
| CVE-2026-97003 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97004 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97007 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97008 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97010 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97011 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-97012 | Important | 8.8 | Microsoft Office Outlook | Microsoft Office Outlook Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-97017 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97738 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97746 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97747 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97748 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97750 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97751 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97752 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97754 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97757 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97762 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97763 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97766 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97768 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97769 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97770 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97771 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97772 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | KB5002928, Release Notes, Release Notes +2 |
| CVE-2026-97773 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97775 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97777 | Important | 8.8 | Microsoft Office Excel | Microsoft Office Excel Remote Code Execution Vulnerability | Release Notes, Release Notes, Release Notes +2 |
| CVE-2026-97781 | Important | 8.8 | Microsoft Office OneNote | Microsoft Office OneNote Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-67625 | Important | 8.5 | SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | KB5128496, KB5128497, KB5128495 +5 |
| CVE-2026-68883 | Important | 8.5 | SQL Server | Microsoft SQL Server Elevation of Privilege Vulnerability | KB5128496, KB5128492, KB5128497 +5 |
| CVE-2026-85886 | Important | 8.5 | SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | KB5128496, KB5128492, KB5128497 +5 |
| CVE-2026-83845 | Important | 8.4 | Windows Internet (wininet.dll) | Windows Internet (wininet.dll) Spoofing Vulnerability | KB5126655, KB5126657, KB5126657 +6 |
| CVE-2026-85369 | Important | 8.2 | Windows Hyper-V | Windows Hyper-V Elevation of Privilege Vulnerability | KB5126655, KB5126657, KB5126657 +6 |
| CVE-2026-85925 | Important | 8.2 | Azure Key Vault | Azure Key Vault Client SDK Elevation of Privilege Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-100218 | Important | 8.1 | Remote Desktop Gateway Service | Remote Desktop Gateway Service Remote Code Execution Vulnerability | KB5127648, KB5127648, KB5126646 +9 |
| CVE-2026-105005 | Important | 8.1 | Windows Schannel | Windows Schannel Remote Code Execution Vulnerability | KB5127646 |
| CVE-2026-69830 | Important | 8.1 | Windows DHCP Server | Windows DHCP Server Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-69913 | Important | 8.1 | Windows TCP/IP | Windows TCP/IP Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-70013 | Important | 8.1 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5127648, KB5126653, KB5126657 +10 |
| CVE-2026-70038 | Important | 8.1 | Windows iSCSI | Windows iSCSI Remote Code Execution Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-70062 | Important | 8.1 | Windows Libarchive | Windows libarchive Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +7 |
| CVE-2026-70111 | Important | 8.1 | Windows Kernel | Windows Kernel Elevation of Privilege Vulnerability | KB5126868, KB5126835, KB5126836 +10 |
| CVE-2026-70127 | Important | 8.1 | Role: DNS Server | Windows Domain Name Service Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-70175 | Important | 8.1 | ASP.NET Core | ASP.NET Core Elevation of Privilege Vulnerability | Release Notes, Release Notes, KB5130034 +2 |
| CVE-2026-70197 | Important | 8.1 | .NET | .NET and Visual Studio Remote Code Execution Vulnerability | Release Notes, Release Notes, KB5130036 +11 |
| CVE-2026-83522 | Important | 8.1 | Windows IKE Extension | Windows IKE Extension Spoofing Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-83674 | Important | 8.1 | Active Directory Federation Services (AD FS) | Active Directory Federation Services (AD FS) Spoofing Vulnerability | KB5126651, KB5126655, KB5126646 +1 |
| CVE-2026-83746 | Important | 8.1 | Skype for Business and Microsoft Lync | Skype for Business Elevation of Privilege Vulnerability | KB5131692, KB5131693, KB5132779 |
| CVE-2026-83844 | Important | 8.1 | Windows Paint | Windows Paint Remote Code Execution Vulnerability | Store App |
| CVE-2026-83914 | Important | 8.1 | Microsoft XML | Microsoft XML Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-84012 | Important | 8.1 | Remote Desktop Gateway Service | Windows Remote Desktop Services Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-85371 | Important | 8.1 | Network Policy Server (NPS) | Network Policy Server (NPS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85799 | Important | 8.1 | Network Policy Server (NPS) | Network Policy Server (NPS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-85899 | Important | 8.1 | Microsoft Edge (Chromium-based) | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-85926 | Important | 8.1 | Windows Secure Socket Tunneling Protocol (SSTP) | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | KB5126651, KB5126657, KB5126657 +10 |
| CVE-2026-88094 | Important | 8.1 | Azure Storage Library | Azure Storage Library Elevation of Privilege Vulnerability | Release Notes, Release Notes |
| CVE-2026-88173 | Important | 8.1 | Windows Background Intelligent Transfer Service (BITS) | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | KB5126651, KB5126655, KB5126646 +3 |
| CVE-2026-97783 | Important | 8.1 | Microsoft Office SharePoint | Microsoft Office SharePoint Spoofing Vulnerability | KB5002883, KB5002891, KB5002882 |
| CVE-2026-69363 | Important | 8.0 | Windows Error Reporting | Windows Error Reporting Elevation of Privilege Vulnerability | KB5122876, KB5122882, KB5122878 +9 |
| CVE-2026-70049 | Important | 8.0 | Microsoft Configuration Manager | Microsoft Configuration Manager Elevation of Privilege Vulnerability | Release Notes, Release Notes, Release Notes |
| CVE-2026-70213 | Important | 8.0 | Microsoft Power Apps | Microsoft Power Apps Remote Code Execution Vulnerability | Release Notes |
| CVE-2026-83838 | Important | 8.0 | Windows Bluetooth A2DP driver | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +8 |
| CVE-2026-85881 | Important | 8.0 | Microsoft Graphics Component | Microsoft Office Graphics Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-88121 | Important | 8.0 | Windows Background Intelligent Transfer Service (BITS) | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-96844 | Important | 8.0 | Microsoft Bluetooth Driver | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability | KB5126835, KB5126868, KB5126651 +10 |
| CVE-2026-96956 | Important | 8.0 | SQL Server | SQL Server Elevation of Privilege Vulnerability | KB5128496, KB5128497, KB5128495 +5 |
| CVE-2026-100217 | Important | 7.8 | Windows Group Policy | Windows Group Policy Elevation of Privilege Vulnerability | KB5126836, KB5126868, KB5126651 +9 |
| CVE-2026-102196 | Important | 7.8 | Windows Broadcast DVR User Service | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | KB5126651, KB5126657, KB5126657 +5 |
| CVE-2026-102201 | Important | 7.8 | Microsoft Windows Media Foundation | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | KB5126651, KB5126657, KB5126657 +5 |
| CVE-2026-102202 | Important | 7.8 | Windows Container Isolation FS Filter Driver (unionfs.sys) | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | KB5126655, KB5127646, KB5126653 +4 |
| CVE-2026-102204 | Important | 7.8 | Windows Subsystem for Linux | Windows Subsystem for Linux Elevation of Privilege Vulnerability | Release Notes |
| CVE-2026-102205 | Important | 7.8 | Windows Universal Disk Format File System Driver (UDFS) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102215 | Important | 7.8 | Windows Universal Disk Format File System Driver (UDFS) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102216 | Important | 7.8 | Windows StateRepository API | Windows StateRepository API Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102218 | Important | 7.8 | Windows Universal Disk Format File System Driver (UDFS) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-102220 | Important | 7.8 | Windows VHD miniport driver | Windows VHD miniport driver Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-102227 | Important | 7.8 | Windows Resilient File System (ReFS) | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | KB5126657, KB5126655, KB5126653 +8 |
| CVE-2026-102233 | Important | 7.8 | Visual Studio Code | Visual Studio Code Security Feature Bypass Vulnerability | Release Notes |
| CVE-2026-103553 | Important | 7.8 | Windows Partition Management Driver | Windows Partition Management Driver Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-103568 | Important | 7.8 | Windows Credential Providers | Windows Credential Providers Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-105003 | Important | 7.8 | HID class driver | HID Class Driver Elevation of Privilege Vulnerability | KB5126836, KB5126868, KB5126651 +9 |
| CVE-2026-105004 | Important | 7.8 | Windows Overlay Filter | Windows Overlay Filter Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-108133 | Important | 7.8 | Windows Modern Device Management (MDM) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | KB5126655 |
| CVE-2026-108136 | Important | 7.8 | Microsoft Windows Search Component | Microsoft Windows Search Component Elevation of Privilege Vulnerability | KB5126835, KB5126836, KB5126868 +10 |
| CVE-2026-108433 | Important | 7.8 | Microsoft Office Word | Microsoft Office Word Security Feature Bypass Vulnerability | Release Notes, Release Notes, Release Notes +1 |
| CVE-2026-49785 | Important | 7.8 | Windows UEFI | UEFI Secure Boot Security Feature Bypass Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-61931 | Important | 7.8 | Windows Perception Simulation Service | Windows Perception Simulation Service Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126657 +4 |
| CVE-2026-68836 | Important | 7.8 | Windows kernel32.dll | Windows kernel32.dll Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +10 |
| CVE-2026-69354 | Important | 7.8 | Windows Error Reporting | Windows Error Reporting Elevation of Privilege Vulnerability | KB5122876, KB5122882, KB5122878 +9 |
| CVE-2026-69471 | Important | 7.8 | Windows Installer | Windows Installer Elevation of Privilege Vulnerability | KB5126651, KB5126655, KB5126657 +10 |
| CVE-2026-69633 | Important | 7.8 | Windows Update | Windows Update Elevation of Privilege Vulnerability | KB5127648, KB5126651, KB5126655 +8 |
Showing 400 of 1477; narrow by component or search.
Revised by Microsoft 2026-10-28. "Exploited" and "disclosed" are Microsoft's own words from the guide's exploitability index; a CVE's page carries NVD's, CISA's and the public exploit indexes' besides.