Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so let me know if you have ideas. (Seriously – I’m out of ideas). If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for October 2026 For the first part of the October release, Adobe released 11 bulletins addressing 174 unique CVEs in Adobe Dimension, Commerce, Substance 3D Sampler, ColdFusion, Photoshop, FrameMaker, Experience Manager, Substance 3D Stager, Content Credentials SDK, Bridge, and Substance 3D Designer. Here’s this month’s overview table: Adobe Patches for October 2026 Adobe Patches for October 2026 Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority APSB26-152 Adobe Experience Manager 33 Critical 10.0 No 2 APSB26-144 Adobe ColdFusion 32 Critical 10.0 No 2 APSB26-153 Adobe Commerce 11 Critical 10.0 No 2 APSB26-163 Content Credentials SDK 30 High 8.6 No 3 APSB26-171 Adobe Dimension 7 High 8.6 No 3 APSB26-158 Adobe Photoshop 18 High 8.2 No 3 APSB26-170 Adobe Substance 3D Stager 16 High 7.8 No 3 APSB26-172 Adobe FrameMaker 10 High 7.8 No 3 APSB26-169 Adobe Substance 3D Designer 9 High 7.8 No 3 APSB26-159 Adobe Substance 3D Sampler 4 High 7.8 No 3 APSB26-167 Adobe Bridge 4 High 7.8 No 3 TOTAL 11 bulletins 174 The one I’d treat as most urgent is the patch for ColdFusion despite the Priority 2 rating. In addition to the CVSS 10 bug, the 10 Critical CVEs include unrestricted file upload (CWE-434), code injection (CWE-94), SSRF, and incorrect authorization — a classic pre-auth RCE profile on an internet-facing server product. Impacts run from arbitrary code execution and privilege escalation to arbitrary file read/write. Up next is the bulletin covering Commerce . It may have the smallest count, but it’s a high-value target, and it follows last month’s actively exploited Commerce zero-day (CVE-2026-75650). The Critical bugs include template-engine injection and incorrect authorization, yielding code execution, privilege escalation, and arbitrary file write. Adobe’s table also flags whether authentication is required per CVE, which is useful for triage here. Finally, the other Priority 2 update covers Experience Manager and is the broadest of the three. Beyond the usual XSS volume (stored, reflected, and DOM-based), it includes genuinely serious server-side bugs: OS command injection, SQL injection, XXE, XML injection, and path traversal, leading to code execution, privilege escalation, and security feature bypass. Worth noting the Vulnerability Details table has 34 rows, but CVE-2026-106631 is listed twice, so it’s 33 distinct CVEs. Aside from the bugs mentioned, all other Adobe patches are Deployment Priority 3. None of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release. Microsoft Patches for October 2026 Before we get into this month’s Microsoft release, let’s talk about what they changed. Microsoft is introducing “risk cohorts”. According to Microsoft, “They are an exploratory way to help customers organize their own analysis. They are not official Microsoft vulnerability categories, do not change Microsoft update guidance, and do not replace the assessment of individual CVEs.” Back in my day, we called these security bulletins. One component could have multiple CVEs in a single bulletin. Microsoft is reintroducing this concept at the group level. I applaud this change as it mirrors my analysis from last month (and this month). Time will tell if enterprises can capitalize on these “cohorts”, but any move made to make the monthly release more manageable is a welcome one. You can read the full details on Microsoft’s site here . Now on to our regularly scheduled analysis. Well, it’s a new record release from Microsoft, again. This is also the first four-digit volume we have ever seen and includes six-digit CVEs. As always, counting this load is tricky, but I see 1,415 new CVEs from Microsoft. That puts this month at a greater volume than any previous YEAR from Microsoft. I’m starting to think I don’t like this new normal. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Developer Tools and .NET, SharePoint, Linux kernel, Skype for Business and Microsoft Lync, SQL Server and Dynamics, Azure and cloud services, and Exchange server. Still, if there’s solace to be had, it’s in the fact that only one of these bugs is under active attack. If you go back to the “Hot 0-day Summer” of 2023, there were 17 Microsoft 0-days between January and October as opposed to 15 this year during the same period. The total number of Microsoft CVEs in 2023? Just 914. So, AI is certainly helping in bug discovery (and likely in bug patching), but we haven’t seen the same increase in the exploitation of 0-days – yet. As witnessed at the last Pwn2Own, AI-assisted exploitation is most certainly a thing. It just hasn’t hit the mainstream yet, even though other incidents are on the rise. Hundreds of CVEs in a single release used to be the exception; now it’s the baseline. Is AI to blame? Partly. It’s accelerating bug-hunting on both sides of the fence, so vendors are finding (and fixing) more flaws, and researchers are finding them faster too. But AI isn’t creating these bugs out of thin air. It’s just shortening the time between a vulnerability existing and someone noticing it. What matters is that discovery is scaling faster than exploitation, so teams that triage by sheer CVE count instead of exploitability are burning cycles on the wrong bugs. Patch what’s proven, prioritized, and public, and treat everything else as this month’s new normal. Two bugs in this release are listed as publicly known: CVE-2026-108398, a .NET Framework security feature bypass that could let an attacker evade Windows Defender Application Control (WDAC) enforcement, and CVE-2026-92707, a denial-of-service bug in MessagePack-CSharp that was released by a third party and is now included in Microsoft’s release. Neither is listed as under active attack. As always, we’ll start with the bug under active attack and move on from there. -              CVE-2026-96951 - Windows Shell Security Feature Bypass Vulnerability This is the lone bug listed as under active attack, and it’s certainly a type of bug we’ve seen before. Going back to 2024 , attackers have used multiple methods to avoid Mark of the Web (MotW) protections. This time, it’s Shell instead of SmartScreen, but the result is the same. As with any bug under active attack, test and deploy this patch quickly -              CVE-2026-102866 – Microsoft Office SharePoint Elevation of Privilege Vulnerability There are lots of SharePoint bugs this month, but this one stands out. It’s the only Critical-rated SharePoint CVE (CVSS 8.1), and the only one an unauthenticated attacker can exploit. It’s an improper cryptographic signature verification bug. An attacker who obtains a valid proof token for a targeted user could modify it, submit it to the server, and authenticate as that user. The only caveat is that the attacker has to obtain that token first, but there are multiple methods this could be achieved. -              CVE-2026-65674 – Microsoft SQL Server Remote Code Execution Vulnerability Like SharePoint, there’s lots to choose from in the SQL component. This one is the highest-scoring CVSS at 8.8 and has the best exploitability rating of any SQL Server bug this month. It’s a deserialization of untrusted data. An authenticated attacker connects to an affected SQL Server and sends a specially crafted request to run code on the server. No user interaction is needed. Definitely check this on any SQL Server directly connected to the internet. -              CVE-2026-70571 - Microsoft Exchange Server Remote Code Execution Vulnerability Technically speaking, this is a wormable bug in Exchange Server. However, I wouldn’t count on that happening. Microsoft states, “Exploitation requires an attacker to have a deep understanding of the target environment and is not guaranteed to succeed.” While the wording is obtuse, it generally means the likelihood of stars aligning to exploit the Exchange Server through this bug is minuscule.  Speaking of Wormable…  I normally call out every bug I think is wormable, but there are just too many this month. Let me sum up. A total of 59 of the October CVEs fit my definition of wormable. Specifically, 57 contain both “An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network” and “No authentication or user interaction is required.” Two more, CVE-2026-70147 and CVE-2026-88178 , use variant wording but also require no authentication or user interaction. These bugs are as follows: •        DHCP Server (6): CVE-2026-96934 , 88117 , 88119 , 88120 , 96320 , 69830 •        Network Policy Server (4): CVE-2026-100222 , 85806 , 85371 , 85799 •        Windows Error Reporting (4): CVE-2026-83519 , 83693 , 83748 , 97815 •        Remote Desktop Gateway (3): CVE-2026-70187 , 100218 , 84012 •        Text Shaping (3): CVE-2026-102210 , 83770 , 97814 •        Two each (14): QUIC ( CVE-2026-100219 , 105016 ), Schannel ( CVE-2026-105008 , 105005 ), DNS Server ( CVE-2026-83869 , 70127 ), Media Foundation ( CVE-2026-83517 , 85814 ), Microsoft XML ( CVE-2026-83935 , 83914 ), RRAS ( CVE-2026-85792 , 85809 ) and PostScript Printer Driver ( CVE-2026-70147 , 70153 ) •        One each (25): Windows Search ( CVE-2026-105010 ), TCP/IP ( CVE-2026-69913 ), IIS ( CVE-2026-70024 ), libarchive ( CVE-2026-70062 ), Rich Text Edit Control ( CVE-2026-70096 ), System Information Console ( CVE-2026-70157 ), .NET ( CVE-2026-70197 ), Active Directory Domain Services ( CVE-2026-70229 ), PowerShell ( CVE-2026-83578 ), CCFFilter Driver ( CVE-2026-83780 ), Shell ( CVE-2026-83782 ), Paint ( CVE-2026-83844 ), Network Load Balancing ( CVE-2026-83862 ), RPC Runtime ( CVE-2026-83910 ), PPP EAP-TLS ( CVE-2026-84015 ), Volume Manager Extension Driver ( CVE-2026-85928 ), Failover Cluster ( CVE-2026-88102 ), Failover Cluster Virtual Driver ( CVE-2026-96864 ), LSASS ( CVE-2026-96219 ), BitLocker ( CVE-2026-96909 ), OLE ( CVE-2026-96924 ), PowerPoint ( CVE-2026-88178 ), Message Queuing ( CVE-2026-108460 ), OpenSSH for Windows ( CVE-2026-97816 ) and Partition Management Driver ( CVE-2026-97805 ) I may be wrong about some of these – there are a few where the description is somewhat…er…ambiguous, but regardless, this number of wormable bugs in 2026 should cause some level of concern. Not panic. There’s no need for that, but it is disconcerting to see this many juicy targets sitting out there. Please do your best to test and deploy these fixes in a timely manner. Here’s the full list of CVEs released by Microsoft for October 2026: October 2026 Microsoft Security Update CVEs CVE Title Severity CVSS Public Exploited Type CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability Important 8.8 No Yes SFB CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability Important 8.8 Yes No SFB CVE-2026-92707 * MessagePack-CSharp Denial of Service Vulnerability Moderate 5.3 Yes No DoS CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability Critical 7.4 No No Spoofing CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability Critical 7.5 No No Spoofing CVE-2026-83943 ** Azure API Center Information Disclosure Vulnerability Critical 8.7 No No Info CVE-2026-77900 ** Azure App Service Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-83947 ** Azure Event Grid Spoofing Vulnerability Critical 7.7 No No Spoofing CVE-2026-69435 ** Azure SRE Agent Elevation of Privilege Vulnerability Critical 9.6 No No EoP CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-62840 Linux Kernel Elevation of Privilege Vulnerability Critical 7 No No EoP CVE-2026-94510 ** Microsoft Bookings Elevation of Privilege Vulnerability Critical 9.9 No No EoP CVE-2026-88131 ** Microsoft Dataverse Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-100215 Microsoft Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-100209 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-100210 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-100211 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97739 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97745 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97755 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97756 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97758 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97759 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97765 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97778 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97780 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97741 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97742 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97753 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97761 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97767 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97776 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70215 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-88144 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-88207 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability Critical 8.1 No No EoP CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-102856 Microsoft Office Visio Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70269 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-88185 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-96207 ** Microsoft Partner Center Elevation of Privilege Vulnerability Critical 10 No No EoP CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-96952 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-21413 * Raw Image Extension Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70229 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-83917 Windows ALPC Elevation of Privilege Vulnerability Critical 7 No No EoP CVE-2026-88174 Windows Deployment Services Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-70250 Windows DHCP Client Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-88117 Windows DHCP Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-88119 Windows DHCP Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-88120 Windows DHCP Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-88171 Windows DHCP Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-83934 Windows GDI+ Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.2 No No EoP CVE-2026-102214 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-100220 Windows Media Video Decoder Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-96202 Windows Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-96943 Windows Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-70187 Windows Remote Desktop Services Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-102225 Windows Text Shaping Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-96914 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-108130 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-88074 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-102211 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 7 No No EoP CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-102869 .NET and Visual Studio Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-58280 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69651 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-84008 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96958 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96959 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96960 .NET Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70162 .NET Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-96225 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96231 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70161 .NET Elevation of Privilege Vulnerability Important 7.3 No No EoP CVE-2026-70190 .NET Elevation of Privilege Vulnerability Important 7.3 No No EoP CVE-2026-70165 .NET Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-85363 .NET Framework Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70035 .NET Framework Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70194 .NET Framework Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-97801 .NET Framework Tampering Vulnerability Important 7.5 No No Tampering CVE-2026-96232 .NET Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-96229 .NET Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-66822 .NET Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-96234 .NET Information Disclosure Vulnerability Important 5.3 No No Info CVE-2026-70174 .NET Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83520 .NET Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-87697 .NET Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96224 .NET Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96235 .NET Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70197 .NET Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-96237 .NET Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-96957 .NET Security Feature Bypass Vulnerability Important 8.8 No No SFB CVE-2026-96238 .NET Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-83666 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83645 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-85319 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-85321 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-85324 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69982 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability Important 5.9 No No SFB CVE-2026-70005 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability Important 5.9 No No SFB CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability Important 9.1 No No Spoofing CVE-2026-83674 Active Directory Federation Services (AD FS) Spoofing Vulnerability Important 8.1 No No Spoofing CVE-2026-83511 Active Directory Federation Services (AD FS) Spoofing Vulnerability Important 7.4 No No Spoofing CVE-2026-103576 Active Directory Federation Services (AD FS) Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-83646 Active Directory Federation Services (AD FS) Spoofing Vulnerability Important 4.8 No No Spoofing CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96233 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96236 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-70175 ASP.NET Core Elevation Of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-70179 ASP.NET Core Elevation Of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-70183 ASP.NET Core Elevation Of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96230 ASP.NET Core Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability Important 9.1 No No SFB CVE-2026-88092 ASP.NET Core Tampering Vulnerability Important 9.4 No No Tampering CVE-2026-85916 Azure Active Directory Information Disclosure Vulnerability Important 6.2 No No Info CVE-2026-96204 Azure Arc Elevation of Privilege Vulnerability Important 6.5 No No EoP CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability Important 7.3 No No RCE CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability Important 8.2 No No EoP CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability Important 7.4 No No SFB CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-85861 Clipboard User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85863 Clipboard User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85912 Clipboard User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-83846 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-95943 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69880 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70228 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70255 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88093 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96108 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70234 Desktop Window Manager Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69974 Desktop Window Manager Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-102226 Dynamics Business Central Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-100214 Dynamics Business Central Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83670 Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69326 Graphic Fonts Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105003 HID Class Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97804 HID Class Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105006 HID Class Driver Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-83569 HID Parser Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70128 HID Parser Library Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83887 HID Parser Library Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83898 HID Parser Library Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83904 HID Parser Library Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70208 HTTP.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83705 HTTP.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83714 HTTP.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-85856 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Important 7.1 No No RCE CVE-2026-83741 Internet Explorer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69963 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69966 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69964 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69970 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83847 Microsoft Account Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85329 Microsoft Account Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69454 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69577 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-96844 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-83868 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83760 Microsoft Bluetooth Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69909 Microsoft COM for Windows Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70264 Microsoft Defender Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-88158 Microsoft Digest Authentication Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-87692 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87695 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87696 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability Important 9.3 No No Spoofing CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85338 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102209 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78459 Microsoft Internet Information Services Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83778 Microsoft Internet Messaging API Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83919 Microsoft Internet Messaging API Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-70049 Microsoft Intune Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-83722 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87710 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70343 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-94506 Microsoft Office Access Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-102850 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-88109 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97774 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85340 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70276 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69922 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70219 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88151 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88153 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88154 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88172 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88175 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88184 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88190 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88192 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88195 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88201 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97740 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97743 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97760 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97779 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70214 Microsoft Office Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-97014 Microsoft Office Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-100212 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70254 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77902 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88145 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97003 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97004 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97007 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97008 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97010 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97011 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97017 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97738 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97746 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97747 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97748 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97750 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97751 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97752 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97754 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97757 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97762 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97763 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97766 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97768 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97769 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97770 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97771 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97772 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97773 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97775 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97777 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97009 Microsoft Office Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-96997 Microsoft Office OneNote Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97781 Microsoft Office OneNote Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-70256 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70257 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70282 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97012 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88203 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97005 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-97744 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-88196 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88197 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-102860 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-102861 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-102862 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70246 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70266 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-88198 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-88200 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70202 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-70251 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-88206 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 4.3 No No EoP CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70259 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70298 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-85932 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70217 Microsoft Office SharePoint Information Disclosure Vulnerability Important 4.9 No No Info CVE-2026-69943 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-85900 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88155 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88166 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-105013 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.4 No No RCE CVE-2026-70267 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.2 No No RCE CVE-2026-88163 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability Important 8.1 No No Spoofing CVE-2026-88204 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No Spoofing CVE-2026-105713 Microsoft Office SharePoint Spoofing Vulnerability Important 5.7 No No Spoofing CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing CVE-2026-102864 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing CVE-2026-88208 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing CVE-2026-88209 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing CVE-2026-97782 Microsoft Office SharePoint Tampering Vulnerability Important 6.8 No No Tampering CVE-2026-96995 Microsoft Office Word Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70206 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70263 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88167 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-88169 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70268 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70287 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70301 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70302 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83891 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88150 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88186 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88202 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70220 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-96996 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-97001 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-88210 Microsoft Office Word Security Feature Bypass Vulnerability Important 7.8 No No SFB CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83769 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83871 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-97811 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83923 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88157 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83754 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70092 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70110 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70109 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85817 Microsoft PowerShell Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70052 Microsoft PowerShell Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-70185 Microsoft PowerShell Security Feature Bypass Vulnerability Important 8.8 No No SFB CVE-2026-85805 Microsoft PowerShell Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-96188 Microsoft PowerToys Elevation of Privilege Vulnerability Important 7.3 No No EoP CVE-2026-83681 Microsoft PowerToys Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-103577 Microsoft QUIC Security Feature Bypass Vulnerability Important 7.5 No No SFB CVE-2026-88193 Microsoft Scripting Engine Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67626 Microsoft SQL Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88084 Microsoft SQL Server Denial of Service Vulnerability Important 5.3 No No DoS CVE-2026-94520 Microsoft SQL Server Denial of Service Vulnerability Important 4.9 No No DoS CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.5 No No EoP CVE-2026-85876 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85919 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88082 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88088 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88085 Microsoft SQL Server Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-85888 Microsoft SQL Server Information Disclosure Vulnerability Important 7.7 No No Info CVE-2026-88081 Microsoft SQL Server Information Disclosure Vulnerability Important 7.7 No No Info CVE-2026-88086 Microsoft SQL Server Information Disclosure Vulnerability Important 5.3 No No Info CVE-2026-67628 Microsoft SQL Server Information Disclosure Vulnerability Important 4.9 No No Info CVE-2026-65674 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67625 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.5 No No RCE CVE-2026-85886 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.5 No No RCE CVE-2026-88083 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70189 Microsoft SQL Server Remote Code Execution Vulnerability Important 6.7 No No RCE CVE-2026-88089 Microsoft SQL Server Remote Code Execution Vulnerability Important 6.7 No No RCE CVE-2026-83945 Microsoft SQL Server Remote Code Execution Vulnerability Important 6.6 No No RCE CVE-2026-70260 Microsoft Trace Data Helper Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70261 Microsoft Trace Data Helper Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-102199 Microsoft Windows Codecs Library Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-102201 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70131 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96186 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70044 Microsoft Windows Media Foundation Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70258 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-87712 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 9.8 No No EoP CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83704 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83829 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83850 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85869 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88182 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88191 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96324 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70086 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70115 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70136 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70150 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70156 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88160 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96937 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-108136 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70141 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70173 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83686 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96910 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83725 Microsoft Windows Search Component Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability Important 5.6 No No DoS CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83914 Microsoft XML Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-96861 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96866 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-85323 Network Device Enrollment Service (NDES) Spoofing Vulnerability Important 6.8 No No Spoofing CVE-2026-83655 Network Policy Server (NPS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96246 Network Policy Server (NPS) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85371 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-85799 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70207 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-85811 Network Policy Server (NPS) Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-85864 Python Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69977 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85943 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-103575 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83688 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69976 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69984 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69986 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69987 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69988 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69991 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69994 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69995 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69996 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69997 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69998 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70004 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70006 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70012 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-97789 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-108458 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96321 Remote Desktop Display Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-84007 Remote Desktop Gateway Service Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-100218 Remote Desktop Gateway Service Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69992 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-83635 Role: DNS Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-88122 Role: DNS Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88123 Role: DNS Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88125 Role: DNS Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88129 Role: DNS Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88130 Role: DNS Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-108127 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-108128 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-108129 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97817 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97819 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97820 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97821 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97822 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97823 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97824 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97825 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97826 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97827 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97828 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97829 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97831 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97832 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97833 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97834 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97835 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97836 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97837 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97838 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97839 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97840 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97841 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97842 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97843 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97844 Role: DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-103560 Role: DNS Server Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-70071 Role: DNS Server Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-70083 Role: DNS Server Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-70085 Role: DNS Server Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-96926 Role: DNS Server Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83908 RPC Runtime Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83515 RPC Runtime Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-88219 RPC Runtime Library Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-102203 RPC Runtime Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83506 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83863 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85318 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85365 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96939 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83719 Servicing Stack Updates Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85835 Servicing Stack Updates Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-85873 Skype for Business Elevation of Privilege Vulnerability Important 6.5 No No EoP CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-108464 Software Protection Platform (SPP) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96956 SQL Server Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-94512 SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69867 SQLite Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability Important 7.3 No No EoP CVE-2026-100205 SysInternals Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-105729 SysInternals Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-49785 UEFI Secure Boot Security Feature Bypass Vulnerability Important 7.8 No No SFB CVE-2026-70252 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP CVE-2026-103555 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-109453 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability Important 6.8 No No Info CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability Important 9.6 No No RCE CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70098 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-102233 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No SFB CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability Important 7.7 No No SFB CVE-2026-102234 Visual Studio Code Security Feature Bypass Vulnerability Important 7.4 No No SFB CVE-2026-102232 Visual Studio Code Security Feature Bypass Vulnerability Important 7 No No SFB CVE-2026-102851 Visual Studio Code Security Feature Bypass Vulnerability Important 6.1 No No SFB CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-85846 Web Account Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-102217 WebDAV Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70262 WebDAV Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-88126 WebDAV Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88135 WebDAV Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96843 WebDAV Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96847 WebDAV Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85370 WebDAV Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85827 WebDAV Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85828 WebDAV Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88137 WebDAV Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-96846 WebDAV Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-87714 WebDAV Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-83721 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83732 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83757 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83762 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83755 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70211 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70284 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70288 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70292 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70293 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70294 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70295 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70167 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83642 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-85903 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88112 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88114 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88116 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70127 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-83647 Windows Active Directory Domain Services Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83648 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-83667 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-88165 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-84019 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83870 Windows Aggregated Data Platform Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85866 Windows ALPC Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-70225 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70205 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70237 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83738 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88149 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70195 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-72955 Windows Application Compatibility Cache Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69945 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-85849 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85934 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69914 Windows AppX Deployment Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69969 Windows AppX Deployment Service Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-69905 Windows AppX Deployment Service Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-96220 Windows Assigned Access Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97799 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70118 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70140 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70230 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83644 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83571 Windows Audio Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96314 Windows Audio Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-108134 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96215 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85832 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85843 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85848 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88118 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88152 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88146 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88142 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88159 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88173 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-88121 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-70184 Windows Backup Engine Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-108135 Windows Backup Engine Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-62687 Windows Backup Engine Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70299 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70274 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83692 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88168 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83852 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83900 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85812 Windows Bind Filter Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85831 Windows Biometric Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83634 Windows BitLocker Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88070 Windows BitLocker Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85920 Windows BitLocker Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability Important 6.1 No No SFB CVE-2026-83838 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-83776 Windows Bluetooth Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-83827 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87713 Windows Bluetooth Port Driver Remote Code Execution Important 7.5 No No EoP CVE-2026-70126 Windows Bluetooth Port Driver Remote Code Execution Important 7.1 No No RCE CVE-2026-83777 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-83739 Windows Bluetooth Service Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-102196 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88105 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97809 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102193 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102195 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102197 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-103554 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-103565 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88103 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88113 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96919 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-97808 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70122 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 6.5 No No EoP CVE-2026-97806 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97807 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-108461 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70148 Windows Broadcast DVR User Service Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-103567 Windows Broadcast DVR User Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85938 Windows Broadcast DVR User Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83771 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-83753 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85803 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85367 Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85377 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83888 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 6.5 No No EoP CVE-2026-70041 Windows CD-ROM Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70275 Windows CD-ROM File System Driver Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69850 Windows Certificates Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69840 Windows Certificates Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69949 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70113 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69940 Windows Client for NFS Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69955 Windows Client for NFS Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-96912 Windows Client License Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-100201 Windows Client License Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70149 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-96948 Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70068 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-83698 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83699 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83580 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83764 Windows Clipboard User Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83893 Windows Clipboard User Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83696 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88106 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88107 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83830 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83848 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96933 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83785 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70233 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85355 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83835 Windows Common Log File System Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85823 Windows Composite Image File System Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85824 Windows Composite Image File System Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70169 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83687 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102202 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97792 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97794 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-97787 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-97810 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-97790 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-70270 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Important 5.5 No No EoP CVE-2026-69918 Windows Core Messaging Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-83587 Windows Core Messaging Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability Important 8.8 No No Spoofing CVE-2026-69736 Windows Credential Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-103568 Windows Credential Providers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69919 Windows Cryptographic Services Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70055 Windows Cryptographic Services Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70014 Windows Cryptographic Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-88096 Windows DCOM Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83679 Windows Defender Firewall Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85332 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83710 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-84014 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85342 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85352 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85904 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85331 Windows Device Association Service Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70227 Windows Device Association Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85336 Windows Device Association Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85815 Windows Device Association Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96854 Windows Device Association Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83792 Windows Device Install Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83877 Windows Devices Human Interface Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83677 Windows DHCP Client Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83665 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70201 Windows DHCP Server Denial of Service Vulnerability Important 5.5 No No DoS CVE-2026-83691 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70066 Windows DHCP Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70069 Windows DHCP Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69830 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70058 Windows DHCP Server Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-85841 Windows DHCP Server Remote Code Execution Vulnerability Important 6.6 No No RCE CVE-2026-83787 Windows DHCP Server Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-85865 Windows DHCP Server Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-83915 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83896 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83902 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83903 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83912 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83922 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85902 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85906 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70151 Windows Direct Composition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70021 Windows Direct Composition Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-96938 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-85931 Windows Distributed File System (DFS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-85798 Windows Distributed File System (DFS) Remote Code Execution Vulnerability Important 7.2 No No RCE CVE-2026-70082 Windows DNS Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70079 Windows DNS Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70155 Windows DNS Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70166 Windows DNS Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-70074 Windows DNS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70119 Windows DNS Remote Code Execution Vulnerability Important 6.5 No No RCE CVE-2026-70244 Windows DNS Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83889 Windows DNS Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83726 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88128 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88177 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88179 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88180 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88181 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88188 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88189 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88194 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85853 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85854 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85855 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83765 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-84016 Windows EAPHost Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85914 Windows Embedded Mode Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96932 Windows Embedded Mode Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83784 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-85791 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83683 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83565 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83759 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-88162 Windows Encrypting File System (EFS) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69452 Windows Enterprise App Management Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69354 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-70103 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83669 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83826 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83840 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85800 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69387 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83689 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83750 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85354 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83658 Windows Error Reporting Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83747 Windows Error Reporting Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83643 Windows Error Reporting Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83758 Windows Error Reporting Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-83916 Windows Error Reporting Remote Code Execution Vulnerability Important 7 No No RCE CVE-2026-97798 Windows Error Reporting Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83715 Windows Error Reporting Tampering Vulnerability Important 7.1 No No Tampering CVE-2026-83695 Windows Event Logging Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83723 Windows Event Logging Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-95904 Windows Event Logging Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83856 Windows Event Logging Service Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70134 Windows Event Tracing Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83707 Windows Event Tracing Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83874 Windows Event Tracing Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83836 Windows Event Tracing Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability Important 5.5 No No Spoofing CVE-2026-85840 Windows Event Viewer Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83881 Windows exFAT File System Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85822 Windows exFAT File System Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102192 Windows Failover Cluster Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96945 Windows Failover Cluster Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-85826 Windows Fast FAT Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-87707 Windows Fax and Scan Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83860 Windows GDI Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69884 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83651 Windows GDI Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-85797 Windows GDI Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70089 Windows GDI Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83929 Windows GDI Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83583 Windows Geotag Broker Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70286 Windows Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85901 Windows Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85908 Windows Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96118 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102194 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88110 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83582 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-100217 Windows Group Policy Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83932 Windows Group Policy Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85884 Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96183 Windows Health and Optimized Experiences Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83740 Windows Hello Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83790 Windows Hello Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83853 Windows Hello Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83849 Windows Hello Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83907 Windows Hello Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability Important 4.4 No No SFB CVE-2026-83926 Windows Hello Security Feature Bypass Vulnerability Important 4.4 No No SFB CVE-2026-96248 Windows Host Guardian Service Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-88072 Windows Host Guardian Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87709 Windows Host Guardian Service Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83875 Windows Human Interface Device Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83884 Windows Human Interface Device Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83892 Windows Human Interface Device Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70248 Windows Hyper-V Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-83636 Windows Hyper-V Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-85369 Windows Hyper-V Elevation of Privilege Vulnerability Important 8.2 No No EoP CVE-2026-70023 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85343 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88071 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96223 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83671 Windows Hyper-V Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-97813 Windows Hyper-V Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83716 Windows Hyper-V Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83931 Windows Hyper-V Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-87705 Windows Hyper-V Security Feature Bypass Vulnerability Important 7.4 No No SFB CVE-2026-83766 Windows Hyper-V Security Feature Bypass Vulnerability Important 4.2 No No SFB CVE-2026-83728 Windows Hyper-V Spoofing Vulnerability Important 8.8 No No Spoofing CVE-2026-103569 Windows IKE Extension Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-83521 Windows IKE Extension Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83522 Windows IKE Extension Spoofing Vulnerability Important 8.1 No No Spoofing CVE-2026-85842 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85930 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83523 Windows Image Acquisition Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-96859 Windows Imaging Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-77496 Windows Imaging Component Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83763 Windows Input System Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69471 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83767 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83779 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85358 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85366 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85796 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87694 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87700 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-87711 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88080 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96308 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70272 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83676 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83680 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83702 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83708 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83717 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83718 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83752 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83775 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83899 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85361 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85364 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85941 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87693 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87704 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87708 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87715 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88076 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88124 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96302 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96305 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96307 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69635 Windows Installer Elevation of Privilege Vulnerability Important 6.6 No No EoP CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85374 Windows Installer Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85830 Windows Installer Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83672 Windows Installer Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-96244 Windows Internal System User Profile Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability Important 8.4 No No Spoofing CVE-2026-83865 Windows Internet (wininet.dll) Tampering Vulnerability Important 4.7 No No Tampering CVE-2026-97830 Windows Internet Information Services Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83795 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83685 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-70008 Windows IP Over USB Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70011 Windows IP Over USB Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69644 Windows iSCSI Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69721 Windows iSCSI Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69521 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70013 Windows iSCSI Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70038 Windows iSCSI Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70095 Windows iSCSI Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-70064 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70241 Windows Kerberos Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83720 Windows Kerberos Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-108132 Windows Kerberos Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70170 Windows Kernel Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-108466 Windows Kernel Denial of Service Vulnerability Important 5.3 No No DoS CVE-2026-70111 Windows Kernel Elevation of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-69898 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70106 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70114 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70121 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70303 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83690 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83735 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83768 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83796 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83833 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83882 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83913 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83918 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85836 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85837 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85850 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85945 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88134 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96312 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96317 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96929 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102207 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70160 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70243 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83675 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83924 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85372 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88139 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88141 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96216 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96868 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-103578 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-83736 Windows Kernel Elevation of Privilege Vulnerability Important 5.5 No No EoP CVE-2026-97803 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102187 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70199 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70232 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70063 Windows Kernel Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-70077 Windows Kernel Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-83925 Windows Kernel Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-108462 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85939 Windows Kernel Security Feature Bypass Vulnerability Important 5.3 No No SFB CVE-2026-83573 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-83568 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83637 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83837 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85871 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96915 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83834 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85857 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96247 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96849 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69650 Windows Key Distribution Center Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69640 Windows Key Distribution Center Security Feature Bypass Vulnerability Important 5.3 No No SFB CVE-2026-88140 Windows Key Storage Provider Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69506 Windows Key Storage Provider Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69985 Windows libarchive Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70062 Windows libarchive Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69968 Windows libarchive Tampering Vulnerability Important 6.5 No No Tampering CVE-2026-69973 Windows libarchive Tampering Vulnerability Important 6.5 No No Tampering CVE-2026-88161 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83516 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83649 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83928 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83783 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88091 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96856 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83724 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85362 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85852 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96851 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-87691 Windows Management Services Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83641 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83650 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-96071 Windows Media Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-85859 Windows Message Queuing Queue Manager Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-85860 Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85334 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-96921 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-83828 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP CVE-2026-83751 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP CVE-2026-88079 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP CVE-2026-83773 Windows MIDI Service Module Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-97800 Windows Mobile Broadband Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70216 Windows Mobile Device Management Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-108133 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83654 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85833 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-108396 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96850 Windows Modern Device Management (MDM) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83657 Windows Modern Device Management (MDM) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-96855 Windows Modern Device Management (MDM) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83656 Windows Modern Device Management (MDM) Tampering Vulnerability Important 4.7 No No Tampering CVE-2026-83697 Windows Modern Device Management (MDM) Tampering Vulnerability Important 4.7 No No Tampering CVE-2026-105007 Windows NDIS Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70072 Windows Netlogon Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-70025 Windows Netlogon Denial of Service Vulnerability Important 5.3 No No DoS CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96209 Windows Network File System Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69675 Windows Network File System Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-102186 Windows Network File System Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-70143 Windows Network File System Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-96311 Windows Network List Service Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83854 Windows Notification Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83700 Windows Now Playing Session Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83701 Windows Now Playing Session Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83706 Windows NTFS Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-69916 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70010 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70172 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83508 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83567 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83585 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83652 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83859 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96217 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96916 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96918 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96928 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96931 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69915 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-81971 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83737 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83864 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96925 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96927 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96935 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83786 Windows NTFS Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-83640 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-83712 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-96867 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability Important 6.7 No No RCE CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70210 Windows OLE DB Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-70059 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70138 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-105004 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69950 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69952 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69953 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69957 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83727 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83749 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83879 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69954 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69967 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69942 Windows Overlay Filter Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69959 Windows Overlay Filter Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69947 Windows Overlay Filter Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-69958 Windows Overlay Filter Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-96315 Windows Overlay Filter Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-83851 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-103553 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83514 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83797 Windows Partition Management Driver Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-96917 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-85915 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85359 Windows Performance Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85333 Windows Performance Monitor Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-85357 Windows Phone Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-88133 Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70132 Windows Portable Device File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83664 Windows Portable Device File System Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-102206 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-83794 Windows Portable Device MTP Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85327 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85376 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85933 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-84018 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85353 Windows Print Spooler Components Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-85847 Windows Print Spooler Components Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83733 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85320 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83781 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96920 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69596 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69743 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72934 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72969 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85328 Windows Projected File System Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70084 Windows Projected File System Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96857 Windows Projected File System Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-84009 Windows Projected File System Tampering Vulnerability Important 4.7 No No Tampering CVE-2026-83867 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70198 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96313 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83927 Windows Registry Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85867 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70137 Windows Remote Access Connection Manager Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-87698 Windows Remote Access Service Infrastructure Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85337 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83861 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96322 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102198 Windows Remote Desktop Protocol Information Disclosure Vulnerability Important 5.3 No No Info CVE-2026-59116 Windows Remote Desktop Security Feature Bypass Vulnerability Important 6.8 No No SFB CVE-2026-84012 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70135 Windows Remote POS Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83586 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70048 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-70116 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability Important 4.2 No No SFB CVE-2026-87702 Windows Resource Management (MRM) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96318 Windows Resume Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70093 Windows Rich Text Edit Control Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83788 Windows rndismp6.sys Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-103558 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-84017 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-85808 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-84020 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85322 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-96245 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-85794 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70158 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-85339 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70057 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-96316 Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105005 Windows Schannel Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-105008 Windows Schannel Spoofing Vulnerability Important 9 No No Spoofing CVE-2026-85818 Windows Schannel Spoofing Vulnerability Important 9 No No Spoofing CVE-2026-83570 Windows Search Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83920 Windows Search Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83564 Windows Search Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83574 Windows Search Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83575 Windows Search Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83921 Windows Search Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102221 Windows Secure Boot Security Feature Bypass Vulnerability Important 4.4 No No SFB CVE-2026-70026 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96865 Windows Secure Kernel Mode Information Disclosure Vulnerability Important 5.6 No No Info CVE-2026-70017 Windows Secure Kernel Mode Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-88147 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85926 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-96858 Windows Security Account Manager Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70212 Windows Security Center Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71347 Windows Security Center Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-88098 Windows Security Support Provider Interface Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83639 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88115 Windows Server for NFS Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83499 Windows Server Update Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-105009 Windows Server Update Service Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-97793 Windows Setup and Deployment Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-73027 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83505 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83509 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83510 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70222 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83873 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83876 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83905 Windows Shell Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85936 Windows Shell Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83906 Windows Shell Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-83579 Windows Smart Card Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83584 Windows Smart Card Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70051 Windows SmartScreen Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85851 Windows SmartScreen Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83504 Windows SmartScreen Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-108463 Windows SmartScreen Security Feature Bypass Vulnerability Important 8.8 No No SFB CVE-2026-62879 Windows SmartScreen Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83789 Windows SMB Client Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-84011 Windows SMB Client Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-96325 Windows SMB Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-88127 Windows SMB Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69934 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70102 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83832 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96862 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-102216 Windows StateRepository API Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85911 Windows StateRepository API Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85910 Windows StateRepository API Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-100216 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-100225 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102189 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-102191 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69763 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69766 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69856 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69931 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69935 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83911 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96944 Windows Storage Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-102188 Windows Storage Port Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-96863 Windows Storage Port Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-88226 Windows Storage Port Driver Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-87706 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70238 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88100 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-88143 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-85872 Windows Storage VSP Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69765 Windows Storport Miniport Driver Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96309 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85879 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96206 Windows Subsystem for Linux Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-96306 Windows Sysmain Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85793 Windows Sysmain Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83678 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85368 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70164 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83682 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83842 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85834 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96852 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83872 Windows TCP/IP Local Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69913 Windows TCP/IP Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-84013 Windows Telephony Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85810 Windows Telephony Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85795 Windows Text Services Framework Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-85905 Windows UI Immersive Server API Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-102205 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102215 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102218 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83513 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83857 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85820 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96946 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96947 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96950 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85825 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96949 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85821 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83713 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85909 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96930 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96953 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-85373 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85375 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85927 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85918 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69633 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69673 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69718 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69733 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69783 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69882 Windows Update Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96323 Windows Update Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69999 Windows Update Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83793 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83886 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83930 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-97812 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83507 Windows Update Orchestrator Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83933 Windows Update Orchestrator Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-70139 Windows Update Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70142 Windows Update Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-100200 Windows Update Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-100203 Windows Update Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83798 Windows Update Stack Spoofing Vulnerability Important 5.5 No No Spoofing CVE-2026-96218 Windows Update Stack Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-83588 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83638 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85935 Windows USB Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-96250 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96253 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96254 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96301 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96304 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96310 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96319 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96860 Windows USB Print Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-85341 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85807 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83659 Windows User Profile Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102220 Windows VHD miniport driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83791 Windows Virtual Input Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70075 Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability Important 4.4 No No SFB CVE-2026-70097 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability Important 5.6 No No Spoofing CVE-2026-83885 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability Important 5.6 No No Spoofing CVE-2026-85356 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83694 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-96243 Windows WalletService Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83703 Windows Wi-Fi Driver Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-85816 Windows Wi-Fi Driver Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-83756 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83761 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85804 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85858 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-96249 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83901 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-85802 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83895 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-96848 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83774 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-83897 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-83909 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-96853 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-70067 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70060 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70104 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70108 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70285 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83883 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70076 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70144 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70176 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70209 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70236 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70249 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70253 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70271 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70273 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83566 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83841 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83866 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69798 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85829 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-83668 Windows WLAN Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70045 Windows Work Folders Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-96923 Windows Workstation Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-87699 Winlogon Elevation of Privilege Vulnerability Important 7.8 No No EoP As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss or that will be revised after the release. Local Privilege Escalations: To say these bugs are prevalent is an understatement. However, of the 677 EoP bugs in the data, 606 (90%) lead to SYSTEM, administrator or root privileges. There are also a few integrity-level or sandbox escapes. There are 10 bugs where the attacker moves from low to medium integrity, and six where they escape a Low Integrity Level or AppContainer sandbox. There are seven bugs where the advisory says only “ELEVATED privileges,” or describes a cloud identity or data-access issue. There are nearly two dozen others where the attacker runs as another user or service account, creates or deletes files in a privileged context, or reaches Local Service. This includes CVE-2026-70190, which lets the attacker create, modify or delete files as SYSTEM but doesn’t give SYSTEM privileges. Frustratingly, there are 23 that have no “what privileges” FAQ at all, and some of these may be cloud fixes with no action needed. If I can be bothered to read them all, they should be bothered to write them all. Office-Related Bugs: I’ve already mentioned a couple of these above, but that still leaves a lot to cover. Counting Skype for Business and Bookings, there are 139 Office-related CVEs (including those mentioned above): 100 RCE, 29 info disclosure, nine EoP and one security feature bypass. Thirty-five are Critical and 104 are Important. I would focus on Outlook, with five Critical RCEs at CVSS 9.8. All five say simply viewing the email in the Reading Pane triggers the bug, with no click and no authentication. That makes them the closest thing to wormable in Office. Then there are the 69 Excel bugs; 51 RCEs and 18 info leaks. Nineteen of these RCEs are Critical at 8.8 (for example CVE-2026-100209). Most of these are the open-and-own variety. Four Excel bugs do list the Preview Pane: CVE-2026-70254 and 88145 (RCE, 8.8), and 88154 and 88175 (info leaks). Word adds 22 more. Most of the RCEs and info leaks name the Preview Pane as a vector. The rest are an EoP and a security feature bypass. There are 12 Access RCEs and three Critical Visio RCEs that are open-and-own. Access also has one info. PowerPoint rounds things out with three Critical RCEs, all of which name the Preview Pane. The other four are info leaks. DNS and DNS Server Bugs: There are 58 CVEs in Windows DNS and DNS Server: 52 tagged DNS Server (role) and six tagged Windows DNS. All 58 are Important, including CVE-2026-96113, an RCE scored at CVSS 9.8. There are still a few where the advisories describe the impact as unauthorized attackers executing code over the network, but without the exact wormable wording. Four of these are untrusted pointer dereferences and one is type confusion. The majority of these bugs (31) are info disclosures. Five are tampering bugs and one is a security feature bypass, but all of these require authentication. Windows Kernel and the Win32k Subsystem: Alright – don’t @me. I know the difference between kernel and Win32k components, but they’re similar enough that I group them together. There are 94 CVEs in the Windows Kernel and Win32K components: Windows Kernel (46), Win32 Kernel Subsystem (36), Win32K (8), Win32K GRFX (3) and Win32K ICOMP (1). By type, 71 are elevation of privilege, 20 are info disclosure, 2 are DoS and 1 is a security feature bypass. Most of these just lead to SYSTEM access as expected. Of the info disclosure bugs, these primarily leak random portions of memory. The only real outlier here is CVE-2026-70111, whose advisory says the attacker elevates privileges “over a network.” That’s unusual for a kernel EoP. Windows DHCP Client and Server: There are 18 CVEs in Windows DHCP: 16 in DHCP Server and 2 in DHCP Client. We’ve already discussed the wormable ones, so I won’t rehash them here. Of the remaining 12 DHCP bugs, two are Critical. CVE-2026-88171 is an unauthenticated double free in DHCP Server that just misses being wormable, and CVE-2026-70250 is a DHCP Client use-after-free that requires an adjacent network. The rest are a mix of authenticated RCEs, two unauthenticated DoS bugs, two EoPs and two security feature bypasses, none rated above “Exploitation Less Likely” by Microsoft. SharePoint Server: Besides the Critical bug already mentioned, SharePoint has 34 other CVEs this month: 13 EoP, seven spoofing, seven RCE, six info disclosure and one tampering bug. All of the rest are Important. The seven RCEs all lean on authentication, but the bar is low. CVE-2026-85900 needs only Site Member permissions, and CVE-2026-88155, 88163 and 88166 need Manage List. CVE-2026-105013 and 70267 don’t say what level an attacker needs, so assume these default permissions only. The bug classes read more like a web-app pentest report than memory corruption: seven of the EoPs are authorization and access-control failures, three more are SSRF, and the spoofing bugs are mostly stored script. The one other unauthenticated bug is CVE-2026-97783, a spoofing flaw at CVSS 8.1. Given SharePoint’s recent history of “Exploitation Less Likely” turning into “in the wild,” don’t skip the RCEs just because they need credentials. SQL Server and Client: Beyond the RCE already mentioned, SQL Server and its client tools have 23 other CVEs this month: nine RCE, seven EoP, four info disclosure, and three DoS. All are Important. The pattern here is authenticated memory corruption: heap and stack overflows, use-after-frees, and out-of-bounds reads. The template is simple: log in, submit a crafted request, corrupt memory, run code on the server. That’s why the CVSS 8.8 bugs here are less scary than they score; an attacker already needs database credentials, but it’s also textbook post-compromise lateral movement. The odd one out is CVE-2026-103572, which isn’t a database bug at all. It’s in SQL Server Management Studio, where a prompt injection through Copilot can turn into code execution. As AI features creep (sneak?) into admin tools, I expect to see more of this. Windows Installer: Windows Installer is the largest component I haven’t mentioned yet, with 38 CVEs: 35 EoPs and three info disclosure bugs. Every one of these bugs are local, every one is Important, and none top CVSS 7.8. Thirty-four of the 35 EoPs end in SYSTEM. The bug classes are the usual memory-safety suspects, with use-after-frees (20) leading, followed by heap overflows (6) and stack overflows (3). It’s the same story we see every month with Installer: an attacker who already has a foothold abuses the repair and rollback paths to get to SYSTEM. None of these will get a headline by themselves, but this is exactly what ransomware crews chain after phishing a user, so don’t skip them. Windows NTFS: NTFS has 26 CVEs this month: 16 EoP, six info disclosure and four RCE. All are Important, none is above CVSS 7.8, and 21 of the 26 are local. The EoPs all lead to SYSTEM, and five of them (CVE-2026-96217, 96916, 96918, 96928 and 96931) are sandbox escapes caused by reparse points created by sandboxed processes. That means a compromised browser or app sandbox could use them to break out. The four RCEs all require an authorized local attacker, so they’re closer to EoPs with extra steps than real remote bugs. Everything else is memory corruption: out-of-bounds reads lead, then use-after-frees and heap overflows. Remote Desktop and Remote Access: Remote Desktop has 30 CVEs across its components: 22 RCE, four info disclosure, two EoP, one DoS and one security feature bypass. Only one is Critical (CVE-2026-70187 in Remote Desktop Gateway, already covered with the wormable bugs). The Remote Desktop Client accounts for 19, 18 of them RCEs, and nearly all are use-after-frees. These are the reverse of the usual direction: the attacker needs a user to connect to a malicious server, so they’re social-engineering bugs. Gateway adds a DoS (CVE-2026-70033) and an info leak (CVE-2026-84007) beyond the three wormable RCEs. Windows Remote Desktop Protocol has two EoPs to SYSTEM, CVE-2026-83861 and -96322. RRAS adds 13 more, including four RCEs, two of which are the 9.8 wormable bugs. Hyper-V Server: Hyper-V has 18 CVEs: seven EoP, four RCE, two each of DoS, info disclosure and security feature bypass, and one spoofing bug. Two are Critical RCEs at CVSS 8.8, CVE-2026-102214 and 105733. The first is the classic guest-to-host scenario, in which an authenticated user on a guest runs a crafted app to execute code on the host. That’s the scenario that matters for anyone running multi-tenant hosts or shared virtualization. CVE-2026-83716 and 83931 are two more guest-triggered RCEs, scored 8.8 and 7.8. The newest Critical addition, CVE-2026-108399, is an EoP at 7.2. Of the other bugs, CVE-2026-85369 is an EoP at 8.2, and CVE-2026-87705 is an unauthenticated security feature bypass over an adjacent network (7.4). Everything is rated “Exploitation Less Likely” except one at “Unlikely,” but test and deploy these before the Hyper-V hosts that carry the most sensitive workloads. A few additional bugs deserve at least a brief mention. The Windows Message Queuing service receives a Critical-rated, 9.8 use-after-free (CVE-2026-100202) that could allow remote code execution via a crafted message, though MSMQ isn’t enabled by default. Five VBS Enclave bugs are also rated Critical and could allow a local attacker to reach SYSTEM. Several 9.8-rated RCEs in Imaging Component, libarchive, Media Player and iSCSI require an in-network attacker. Newer additions to the release include Critical RCEs in Windows PDF (CVE-2026-108457), the PostScript Printer Driver (CVE-2026-108467) and HEVC Video Extensions (CVE-2026-108400), along with a Critical AD FS spoofing bug (CVE-2026-108131). The Exchange XSS (CVE-2026-70279) and the VS Code project-open RCE (CVE-2026-102238) round out the higher-scoring items. The remaining ~850 fixes are mostly lower-profile: local EoPs, information disclosures, and denial-of-service bugs. They are spread across Windows Search, .NET and ASP.NET Core, Windows Error Reporting, Broadcast DVR, UDFS, the Overlay Filter driver, AD FS, WebDAV and DWM. Seven cloud fixes (Partner Center, Azure App Service, Dataverse, Azure SRE Agent, API Center, Bookings and Event Grid) are rated Critical but need no customer action. No new advisories are being released this month. Looking Ahead The next Patch Tuesday will be on November 10. Regardless of how big (or how small!) the release may be, I’ll be back to do my best to discern what you need to know. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!