Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the Notable CVEs section of the Security Update Guide omits one of these. As usual, browser vulns are not included in the Patch Tuesday count above, but unusually, Microsoft does not appear to have published any desktop browser security patches so far this month.
SharePoint: critical RCE chain by Rapid7
Today sees the publication of CVE-2026-63520, a high-severity remote code execution in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft; this vulnerability is the second in a pair of exploits which, when chained together, comprise a critical unauthenticated remote code execution vulnerability in a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. Alongside today’s coordinated disclosure of CVE-2026-63520, Rapid7 has now published a detailed technical analysis and proof-of-concept for CVE-2026-55040, the first vulnerability in the chain.
AFD for Winsock: zero-day EoP
Rapid7 has previously discussed the Windows Ancillary Function Driver for WinSock, and today it returns to center stage with another exploited-in-the-wild elevation-of-privilege vulnerability. Successful exploitation requires winning a race condition, which increases the difficulty of producing a stable exploit. This also helps keep the CVSS v3 base score down to 7.0, along with a Microsoft proprietary severity ranking of merely important, rather than critical. However, with no user interaction required, and a prize of SYSTEM-level access, CVE-2026-68820 is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon.
What’s the opposite of coordinated disclosure?
This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of CVE-2026-62832, an elevation of privilege vulnerability in the Windows User Profile Service. Exploitation leads to administrator rights on the local asset, and is achieved via a specially crafted application, which is Microsoft corporate argot for exploit code. Between the public disclosure and the FAQ, which describes an authenticated attacker who has credentials for another account and loads another user’s registry hive, the advisory is a solid match for Nightmare Eclipse’s description of LegacyHive, which Rapid7 discussed last month.
Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as CVE-2026-50656 during July, a month after its public disclosure. Both vulnerabilities are therefore elevation-of-privilege to SYSTEM vulnerabilities in Defender.
Container isolation filesystem driver: isolation failure, tampering
CVE-2026-72971 describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case.
Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which MSRC has ever patched or otherwise addressed. CVE-2026-72971 isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities.
Edge: update slowdown?
Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge last received security patches on July 31, 2026. Meanwhile, the Chrome Stable Channel received patches for 41 vulnerabilities on August 6, 2026. Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past.
Microsoft lifecycle update
August is typically a quieter month for Microsoft product lifecycle transitions, and this year continues that pattern. The next lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel, with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.
Summary charts
Summary tables
Vulnerabilities by Product Family
Apps vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
Azure vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-47299 | Azure Monitor Agent Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
Browser vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70339 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 5.4 |
| CVE-2026-19137 | CVE-2026-19137 Use after free in WebGL | n/a | No | |
| CVE-2026-19138 | CVE-2026-19138 Heap buffer overflow in CrashReporting | n/a | No | |
| CVE-2026-19139 | CVE-2026-19139 Race in CredentialProvider | n/a | No | |
| CVE-2026-19140 | CVE-2026-19140 Use after free in GPU | n/a | No | |
| CVE-2026-19142 | CVE-2026-19142 Use after free in Views | n/a | No | |
| CVE-2026-19144 | CVE-2026-19144 Use after free in HTML | n/a | No | |
| CVE-2026-19145 | CVE-2026-19145 Use after free in Translate | n/a | No | |
| CVE-2026-19146 | CVE-2026-19146 Uninitialized Use in GPU | n/a | No | |
| CVE-2026-19147 | CVE-2026-19147 Use after free in Aura | n/a | No | |
| CVE-2026-19148 | CVE-2026-19148 Out of bounds write in GPU | n/a | No | |
| CVE-2026-19149 | CVE-2026-19149 Use after free in Aura | n/a | No | |
| CVE-2026-19150 | CVE-2026-19150 Inappropriate implementation in V8 | n/a | No | |
| CVE-2026-19151 | CVE-2026-19151 Use after free in V8 | n/a | No | |
| CVE-2026-19152 | CVE-2026-19152 Inappropriate implementation in Navigation | n/a | No | |
| CVE-2026-19153 | CVE-2026-19153 Insufficient validation of untrusted input in Workers | n/a | No | |
| CVE-2026-19155 | CVE-2026-19155 Use after free in Payments | n/a | No | |
| CVE-2026-19156 | CVE-2026-19156 Heap buffer overflow in Base | n/a | No | |
| CVE-2026-19157 | CVE-2026-19157 Out of bounds write in ANGLE | n/a | No | |
| CVE-2026-19158 | CVE-2026-19158 Use after free in Views | n/a | No | |
| CVE-2026-19159 | CVE-2026-19159 Use after free in Views | n/a | No | |
| CVE-2026-19160 | CVE-2026-19160 Uninitialized Use in Skia | n/a | No | |
| CVE-2026-19161 | CVE-2026-19161 Uninitialized Use in Skia | n/a | No | |
| CVE-2026-19162 | CVE-2026-19162 Out of bounds write in V8 | n/a | No | |
| CVE-2026-19163 | CVE-2026-19163 Use after free in Media | n/a | No | |
| CVE-2026-19164 | CVE-2026-19164 Insufficient validation of untrusted input in Codecs | n/a | No | |
| CVE-2026-19165 | CVE-2026-19165 Use after free in Extensions | n/a | No | |
| CVE-2026-19166 | CVE-2026-19166 Use after free in Web Authentication | n/a | No | |
| CVE-2026-19167 | CVE-2026-19167 Integer overflow in GPU | n/a | No | |
| CVE-2026-19168 | CVE-2026-19168 Inappropriate implementation in V8 | n/a | No | |
| CVE-2026-19169 | CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks | n/a | No | |
| CVE-2026-19170 | CVE-2026-19170 Use after free in WebGL | n/a | No | |
| CVE-2026-19171 | CVE-2026-19171 Use after free in Media | n/a | No | |
| CVE-2026-19172 | CVE-2026-19172 Use after free in Views | n/a | No | |
| CVE-2026-19173 | CVE-2026-19173 Out of bounds write in Skia | n/a | No | |
| CVE-2026-19174 | CVE-2026-19174 Integer overflow in V8 | n/a | No | |
| CVE-2026-19175 | CVE-2026-19175 Use after free in Payments | n/a | No | |
| CVE-2026-19176 | CVE-2026-19176 Use after free in Skia | n/a | No | |
| CVE-2026-19177 | CVE-2026-19177 Insufficient validation of untrusted input in UI | n/a | No |
Developer Tools vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62901 | .NET Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-58641 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.1 |
| CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62898 | Microsoft QUIC Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-58612 | PowerShell Information Disclosure Vulnerability | Exploitation Less Likely | No | 7.4 |
| CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 8.2 |
ESU vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.6 |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
Microsoft Dynamics vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-40375 | Microsoft Dynamics Business Central Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
Microsoft Office vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.4 |
| CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability | Exploitation Less Likely | No | 9.3 |
| CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability | Exploitation Unlikely | No | 4.3 |
| CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.3 |
| CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.1 |
| CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-65660 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 7.3 |
| CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability | N/A | No | 4.6 |
| CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Unlikely | No | 4.6 |
| CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65767 | Microsoft Teams for Android and iOS Spoofing Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
Server Software vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.2 |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.0 |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | Exploitation Less Likely | No | 7.3 |
SQL Server vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-65811 | Power BI Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
System Center vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
Windows vulnerabilities
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.6 |
| CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | N/A | No | 9.8 |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | Exploitation Less Likely | No | 7.9 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | Exploitation Less Likely | No | 5.9 |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62798 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62705 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62722 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Exploitation Unlikely | Yes | 5.5 |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 9.8 |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Exploitation More Likely | No | 8.8 |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.7 |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 6.7 |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.5 |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 9.8 |
| CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 6.6 |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.0 |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Less Likely | No | 7.5 |
| CVE-2026-65796 | Windows iSCSI Target Service Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | Exploitation Unlikely | No | 9.8 |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 6.4 |
| CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.0 |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Exploitation Less Likely | No | 8.3 |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | Exploitation Unlikely | No | 5.9 |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 4.6 |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | Exploitation Unlikely | No | 5.5 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | Exploitation Less Likely | No | 6.5 |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | Exploitation Unlikely | No | 5.3 |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.1 |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | Exploitation Unlikely | No | 6.5 |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.8 |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | Exploitation Less Likely | No | 8.8 |
| CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | Exploitation More Likely | No | 7.5 |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | Exploitation Unlikely | No | 8.1 |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.0 |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Exploitation Less Likely | No | 6.8 |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.8 |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation More Likely | No | 7.8 |
| CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | Exploitation Less Likely | No | 5.5 |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | Exploitation Unlikely | No | 7.8 |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | Exploitation Less Likely | No | 7.0 |
Zero-Day Vulnerabilities: Known Exploited
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation Detected | No | 7.0 |
Zero-Day Vulnerabilities: Publicly Disclosed (No known exploitation)
CVE | Title | Exploitation status | Publicly disclosed? | CVSS v3 base score |
|---|---|---|---|---|
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Exploitation Unlikely | Yes | 5.5 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Exploitation More Likely | Yes | 7.8 |
