Microsoft bu ay yayınladığı Patch Tuesday güncellemeleri ile 3 adet zero-day güvenlik açığı ve toplamda 1411 zafiyeti kapattı.
Kapatılan zafiyetler aşağıdaki gibi:
- 677 Elevation of Privilege Vulnerabilities
- 40 Security Feature Bypass Vulnerabilities
- 317 Remote Code Execution Vulnerabilities
- 254 Information Disclosure Vulnerabilities
- 73 Denial of Service Vulnerabilities
- 28 Spoofing Vulnerabilities
3 Adet Zero-Day Kapatıldı
CVE-2026-96951 – Windows Shell Security Feature Bypass Vulnerability
CVE-2026-108398 – .NET Framework Security Feature Bypass Vulnerability
CVE-2026-92707 – MessagePack-CSharp Denial of Service Vulnerability
Ekim 2026 Patch Tuesday Güvenlik Güncellemelerinin Tam Listesi
| Tag | CVE ID | CVE Title | Severity |
|---|---|---|---|
| .NET | CVE-2026-70161 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-70174 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-70162 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-92707 | MessagePack-CSharp Denial of Service Vulnerability | Moderate |
| .NET | CVE-2026-87697 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-96959 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-96960 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-96957 | .NET Security Feature Bypass Vulnerability | Important |
| .NET | CVE-2026-96958 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-96234 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-96238 | .NET Security Feature Bypass Vulnerability | Important |
| .NET | CVE-2026-96235 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-96237 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-96231 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-96224 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-70165 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-96229 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-96225 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-70197 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-70190 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-58280 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-69651 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-84008 | .NET Denial of Service Vulnerability | Important |
| .NET | CVE-2026-66822 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-83520 | .NET Remote Code Execution Vulnerability | Important |
| .NET | CVE-2026-96232 | .NET Information Disclosure Vulnerability | Important |
| .NET and Visual Studio | CVE-2026-102869 | .NET and Visual Studio Elevation of Privilege Vulnerability | Important |
| .NET Framework | CVE-2026-108398 | .NET Framework Security Feature Bypass Vulnerability | Important |
| .NET Framework | CVE-2026-70194 | .NET Framework Security Feature Bypass Vulnerability | Important |
| .NET Framework | CVE-2026-70007 | .NET Framework Remote Code Execution Vulnerability | Important |
| .NET Framework | CVE-2026-70035 | .NET Framework Remote Code Execution Vulnerability | Important |
| .NET Framework | CVE-2026-97801 | .NET Framework Tampering Vulnerability | Important |
| .NET Framework | CVE-2026-85363 | .NET Framework Elevation of Privilege Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-83666 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-83648 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-88165 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-70229 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Critical |
| Active Directory Domain Services | CVE-2026-83667 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-83647 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-103576 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-83511 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-96252 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-83646 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-83645 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-97788 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-85324 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-96222 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Critical |
| Active Directory Federation Services (AD FS) | CVE-2026-69982 | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-70005 | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-85319 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-85321 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-108131 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Critical |
| Active Directory Federation Services (AD FS) | CVE-2026-83674 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | Important |
| ASP.NET Core | CVE-2026-70181 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-70179 | ASP.NET Core Elevation of Privilege Vulnerability | Important |
| ASP.NET Core | CVE-2026-70188 | ASP.NET Core Security Feature Bypass Vulnerability | Important |
| ASP.NET Core | CVE-2026-96230 | ASP.NET Core Remote Code Execution Vulnerability | Important |
| ASP.NET Core | CVE-2026-70183 | ASP.NET Core Elevation of Privilege Vulnerability | Important |
| ASP.NET Core | CVE-2026-96236 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-102870 | ASP.NET Core Remote Code Execution Vulnerability | Important |
| ASP.NET Core | CVE-2026-70186 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-70196 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-96233 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-70159 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-70175 | ASP.NET Core Elevation of Privilege Vulnerability | Important |
| ASP.NET Core | CVE-2026-88092 | ASP.NET Core Tampering Vulnerability | Important |
| Azure Active Directory | CVE-2026-85916 | Azure Active Directory Information Disclosure Vulnerability | Important |
| Azure API Center | CVE-2026-83943 | Azure API Center Information Disclosure Vulnerability | Critical |
| Azure App Service | CVE-2026-77900 | Azure App Service Remote Code Execution Vulnerability | Critical |
| Azure Arc | CVE-2026-96204 | Azure Arc Elevation of Privilege Vulnerability | Important |
| Azure CycleCloud | CVE-2026-100207 | Azure CycleCloud Remote Code Execution Vulnerability | Important |
| Azure DevOps | CVE-2026-69877 | Azure DevOps Information Disclosure Vulnerability | Important |
| Azure Event Grid | CVE-2026-83947 | Azure Event Grid Spoofing Vulnerability | Critical |
| Azure HDInsight | CVE-2026-85891 | Azure HDInsight Information Disclosure Vulnerability | Important |
| Azure Key Vault | CVE-2026-88132 | Azure Key Vault Information Disclosure Vulnerability | Important |
| Azure Key Vault | CVE-2026-85922 | Azure Key Vault Security Feature Bypass Vulnerability | Important |
| Azure Key Vault | CVE-2026-85925 | Azure Key Vault Client SDK Elevation of Privilege Vulnerability | Important |
| Azure SRE Agent | CVE-2026-69435 | Azure SRE Agent Elevation of Privilege Vulnerability | Critical |
| Azure Storage Library | CVE-2026-88094 | Azure Storage Library Elevation of Privilege Vulnerability | Important |
| Connected Devices Platform Service (Cdpsvc) | CVE-2026-83846 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Important |
| Connected Devices Platform Service (Cdpsvc) | CVE-2026-95943 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-69974 | Desktop Window Manager Information Disclosure Vulnerability | Important |
| Desktop Window Manager | CVE-2026-70234 | Desktop Window Manager Information Disclosure Vulnerability | Important |
| Desktop Window Manager | CVE-2026-70228 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-96108 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-69880 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-88093 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-69926 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Desktop Window Manager | CVE-2026-70255 | Desktop Window Manager Elevation of Privilege Vulnerability | Important |
| Dynamics Business Central | CVE-2026-105728 | Dynamics Business Central Information Disclosure Vulnerability | Important |
| Dynamics Business Central | CVE-2026-100214 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | Important |
| Dynamics Business Central | CVE-2026-105727 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | Important |
| Dynamics Business Central | CVE-2026-102226 | Dynamics Business Central Elevation of Privilege Vulnerability | Important |
| Function Discovery Service (fdwsd.dll) | CVE-2026-83670 | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability | Important |
| Graphic Fonts | CVE-2026-69326 | Graphic Fonts Remote Code Execution Vulnerability | Important |
| HID class driver | CVE-2026-105003 | HID Class Driver Elevation of Privilege Vulnerability | Important |
| HID class driver | CVE-2026-97804 | HID Class Driver Elevation of Privilege Vulnerability | Important |
| HID class driver | CVE-2026-105006 | HID Class Driver Elevation of Privilege Vulnerability | Important |
| HID Parser Library | CVE-2026-83877 | Windows Devices Human Interface Elevation of Privilege Vulnerability | Important |
| HID Parser Library | CVE-2026-83904 | HID Parser Library Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-83884 | Windows Human Interface Device Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-83569 | HID Parser Library Elevation of Privilege Vulnerability | Important |
| HID Parser Library | CVE-2026-83898 | HID Parser Library Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-83887 | HID Parser Library Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-83892 | Windows Human Interface Device Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-83875 | Windows Human Interface Device Information Disclosure Vulnerability | Important |
| HID Parser Library | CVE-2026-70128 | HID Parser Library Information Disclosure Vulnerability | Important |
| Internet Explorer | CVE-2026-83741 | Internet Explorer Elevation of Privilege Vulnerability | Important |
| Linux Kernel | CVE-2026-62840 | Linux Kernel Elevation of Privilege Vulnerability | Critical |
| Mariner | CVE-2026-85494 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) | Moderate |
| Mariner | CVE-2026-86535 | Apache Thrift: A JSON member name can stall the Node server’s event loop indefinitely | Important |
| Mariner | CVE-2026-86537 | Apache Thrift: A truncated HTTP request stops the D library’s server, allowing an unauthenticated remote attacker to deny service | Important |
| Mariner | CVE-2026-87117 | Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec | Important |
| Mariner | CVE-2026-73636 | Apache HTTP Server: mod_auth_digest one-time-nonce replay attack | Important |
| Mariner | CVE-2026-88647 | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate. | Important |
| Mariner | CVE-2026-88648 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates. | Moderate |
| Mariner | CVE-2026-89091 | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution | Important |
| Mariner | CVE-2026-86536 | Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object’s prototype in generated JavaScript | Moderate |
| Mariner | CVE-2026-78660 | HTTP/2 transport accepts malformed framing-related headers in net/http | Important |
| Mariner | CVE-2026-78659 | HTTP/2 server memory exhaustion due to Trailer headers in net/http | Moderate |
| Mariner | CVE-2026-78663 | Double flow control refund on HTTP/2 server streams in net/http | Critical |
| Mariner | CVE-2026-79768 | Apache HTTP Server: mod_userdir information disclosure | Moderate |
| Mariner | CVE-2026-78669 | Excessive CPU consumption from repeated initial window changes in net/http | Important |
| Mariner | CVE-2026-75818 | Heap Buffer Overflow in GNU Aspell’s prezip utility | Low |
| Mariner | CVE-2026-73637 | Apache HTTP Server: mod_auth_digest DoS attack | Moderate |
| Mariner | CVE-2026-75819 | Out-of-bounds Read in GNU Aspell | Low |
| Mariner | CVE-2026-77214 | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer | Important |
| Mariner | CVE-2026-75820 | Integer Truncation Leading to Heap Corruption in GNU Aspell | Low |
| Mariner | CVE-2026-82458 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available | Moderate |
| Mariner | CVE-2026-85088 | Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match | Moderate |
| Mariner | CVE-2026-85087 | Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op | Moderate |
| Mariner | CVE-2026-85476 | Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 | Moderate |
| Mariner | CVE-2026-85493 | Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) | Important |
| Mariner | CVE-2026-85483 | Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end | Moderate |
| Mariner | CVE-2026-83632 | Apache Thrift: C++ THttpTransport grows its line buffer without bound | Critical |
| Mariner | CVE-2026-82459 | Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process | Moderate |
| Mariner | CVE-2026-83663 | Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) | Moderate |
| Mariner | CVE-2026-85086 | Apache Thrift: Perl TLS client disables certificate verification by default | Moderate |
| Mariner | CVE-2026-83745 | Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) | Important |
| Mariner | CVE-2026-90440 | Apache Thrift: An exception escaping a libevent callback stops the D library’s non-blocking server, allowing an unauthenticated remote attacker to deny service | Important |
| Mariner | CVE-2026-94646 | Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) | Important |
| Mariner | CVE-2026-94645 | Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound | Important |
| Mariner | CVE-2026-94648 | Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound | Important |
| Mariner | CVE-2026-94651 | Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error | Important |
| Mariner | CVE-2026-94650 | Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) | Important |
| Mariner | CVE-2026-94644 | Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound | Important |
| Mariner | CVE-2026-94637 | Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame | Moderate |
| Mariner | CVE-2026-94636 | Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up | Moderate |
| Mariner | CVE-2026-94638 | Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` | Moderate |
| Mariner | CVE-2026-94642 | Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception | Important |
| Mariner | CVE-2026-94639 | Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) | Important |
| Mariner | CVE-2026-98384 | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() | Low |
| Mariner | CVE-2026-94658 | Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) | Important |
| Mariner | CVE-2026-95184 | Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS). | Important |
| Mariner | CVE-2026-95210 | Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. | Low |
| Mariner | CVE-2026-95209 | An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). | Important |
| Mariner | CVE-2026-94657 | Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound | Important |
| Mariner | CVE-2026-94653 | Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) | Important |
| Mariner | CVE-2026-94652 | Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back | Low |
| Mariner | CVE-2026-94654 | Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame | Important |
| Mariner | CVE-2026-94656 | Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound | Important |
| Mariner | CVE-2026-94655 | Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic | Important |
| Mariner | CVE-2026-93320 | BuildKit improperly handles special files in build snapshots | Moderate |
| Mariner | CVE-2026-93319 | A malicious frontend can cause a daemon panic | Moderate |
| Mariner | CVE-2026-93321 | Malformed LLB file operation can crash buildkitd | Moderate |
| Mariner | CVE-2026-93323 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | Moderate |
| Mariner | CVE-2026-93322 | Malformed MergeOp can crash the BuildKit daemon | Moderate |
| Mariner | CVE-2026-93318 | Cache poisoning via unvalidated image layer DiffIDs | Important |
| Mariner | CVE-2026-91137 | Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements | Important |
| Mariner | CVE-2026-91135 | Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) | Important |
| Mariner | CVE-2026-92542 | Blind VXLAN injection into encrypted overlay networks from cluster peer | Moderate |
| Mariner | CVE-2026-92834 | Apache Thrift: C++ WebSocket server transport does not read a full request length | Moderate |
| Mariner | CVE-2026-92543 | Docker Engine insecure-registry fallback via malicious DNS responses | Important |
| Mariner | CVE-2026-94448 | Reset context tracking on consecutive template expressions in html/template | Moderate |
| Mariner | CVE-2026-94447 | Checksum database bypass for golang.org/toolchain in cmd/go | Moderate |
| Mariner | CVE-2026-94633 | Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length | Important |
| Mariner | CVE-2026-94635 | Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name | Important |
| Mariner | CVE-2026-94634 | Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default | Moderate |
| Mariner | CVE-2026-94444 | Checksum bypass for golang.org/fips140 in cmd/go | Important |
| Mariner | CVE-2026-93546 | Apache HTTP Server: mod_dav_fs namespace overflow | Important |
| Mariner | CVE-2026-93326 | Crafted Git build source can bypass certain policy validation | Moderate |
| Mariner | CVE-2026-93925 | Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id | Moderate |
| Mariner | CVE-2026-94440 | Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart | Important |
| Mariner | CVE-2026-93926 | Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path | Moderate |
| Mariner | CVE-2026-107885 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes. | Low |
| Mariner | CVE-2026-107778 | MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() | Moderate |
| Mariner | CVE-2026-107886 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges. | Low |
| Mariner | CVE-2026-107890 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration. | Low |
| Mariner | CVE-2026-107888 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this. | Moderate |
| Mariner | CVE-2026-107325 | Application denial of service via missing BSON array length validation in MongoDB Go Driver | Moderate |
| Mariner | CVE-2026-107324 | Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver | Moderate |
| Mariner | CVE-2026-107655 | Cups: null pointer dereference via embedded job ticket comments allows remote denial of service | Low |
| Mariner | CVE-2026-107718 | AdonisJS: Unencoded route parameters can produce open redirects | Moderate |
| Mariner | CVE-2026-107708 | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC | Moderate |
| Mariner | CVE-2026-108976 | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992. | Important |
| Mariner | CVE-2026-103531 | OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow | Moderate |
| Mariner | CVE-2026-103006 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service | Moderate |
| Mariner | CVE-2026-102554 | Denial of Service via Eager Array Allocation During Deserialization in Guava | Moderate |
| Mariner | CVE-2026-108985 | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored. | Important |
| Mariner | CVE-2026-108266 | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | Critical |
| Mariner | CVE-2026-108119 | Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix | Moderate |
| Mariner | CVE-2026-105712 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with –directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user’s filesystem permissions. An archive extracted into a fresh empty directory does not have this risk. | Low |
| Mariner | CVE-2026-105326 | Cups: cups: argument injection in mailto notifier via notify-recipient-uri | Low |
| Mariner | CVE-2026-108267 | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | Critical |
| Mariner | CVE-2026-107302 | msgpack5: Truncated map32 headers throw an unexpected error | Important |
| Mariner | CVE-2026-106584 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. | Low |
| Mariner | CVE-2026-106583 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. | Low |
| Mariner | CVE-2026-106585 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. | Moderate |
| Mariner | CVE-2026-106587 | In sshd in OpenSSH before 10.6, the value “none” for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. | Low |
| Mariner | CVE-2026-106586 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. | Low |
| Mariner | CVE-2026-106552 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. | Moderate |
| Mariner | CVE-2026-106547 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | Important |
| Mariner | CVE-2026-106553 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. | Low |
| Mariner | CVE-2026-106582 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 “Crossing the Streams” findings. | Low |
| Mariner | CVE-2026-106555 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. | Low |
| Mariner | CVE-2026-105773 | Canimaan Software ClamXAV local privilege escalation | Important |
| Mariner | CVE-2026-107298 | msgpack5: Deeply nested input can exhaust the decoder stack | Moderate |
| Mariner | CVE-2026-107299 | msgpack5: Reserved byte can cause unbounded stream buffering | Moderate |
| Mariner | CVE-2026-107301 | msgpack5: Partial options disable prototype protection | Moderate |
| Mariner | CVE-2026-107300 | msgpack5: Many buffered values can exhaust the streaming decoder stack | Important |
| Mariner | CVE-2026-106589 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices. | Low |
| Mariner | CVE-2026-106454 | Twisted: IMAP wildcardToRegexp() ReDoS | Moderate |
| Mariner | CVE-2026-107161 | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients | Important |
| Mariner | CVE-2026-107297 | msgpack5: Quadratic parsing in the streaming decoder | Moderate |
| Mariner | CVE-2026-107296 | msgpack5: Decoding negative int64 values mutates the input buffer | Low |
| Mariner | CVE-2026-19029 | HDF5 scale-offset filter heap buffer over-read via crafted chunk | Moderate |
| Mariner | CVE-2026-61374 | Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit | Important |
| Mariner | CVE-2026-61373 | Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation | Important |
| Mariner | CVE-2026-61801 | github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files | Moderate |
| Mariner | CVE-2026-63292 | Apache HTTP Server: mod_vhost_alias stack overflow | Moderate |
| Mariner | CVE-2026-63045 | Apache HTTP Server: mod_proxy_ftp PASV address handling | Important |
| Mariner | CVE-2026-57941 | Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy | Critical |
| Mariner | CVE-2026-56866 | HTTP/1 client connection desynchronization after CONNECT rejection in net/http | Important |
| Mariner | CVE-2026-58415 | Apache HTTP Server: mod_dav_fs property database read access | Moderate |
| Mariner | CVE-2026-59797 | Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function | Critical |
| Mariner | CVE-2026-59685 | Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM | Important |
| Mariner | CVE-2026-66837 | Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length | Important |
| Mariner | CVE-2026-66331 | Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize | Moderate |
| Mariner | CVE-2026-66858 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) | Important |
| Mariner | CVE-2026-67693 | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU) | Important |
| Mariner | CVE-2026-66859 | Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route | Important |
| Mariner | CVE-2026-63772 | Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count | Important |
| Mariner | CVE-2026-63686 | Apache HTTP Server: mod_xml2enc crash on charset conversion failure | Important |
| Mariner | CVE-2026-66054 | Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize | Moderate |
| Mariner | CVE-2026-66081 | Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages | Moderate |
| Mariner | CVE-2026-66055 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) | Important |
| Mariner | CVE-2026-56857 | Root.Mkdir(All) can follow junctions out of the root on Windows in os | Critical |
| Mariner | CVE-2026-42616 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file. | Important |
| Mariner | CVE-2026-42528 | Apache HTTP Server: mod_dav shared lock overflow | Moderate |
| Mariner | CVE-2026-42617 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. | Important |
| Mariner | CVE-2026-46569 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. | Important |
| Mariner | CVE-2026-42618 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file. | Important |
| Mariner | CVE-2026-102411 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | Moderate |
| Mariner | CVE-2026-19585 | Go-getter vulnerable to a path traversal in S3/GCS directory download handling | Moderate |
| Mariner | CVE-2026-102407 | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification | Moderate |
| Mariner | CVE-2026-42356 | Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories | Low |
| Mariner | CVE-2026-102404 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service | Moderate |
| Mariner | CVE-2026-56153 | Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char | Important |
| Mariner | CVE-2026-48005 | Apache HTTP Server: mod_auth_digest reauthentication attack | Moderate |
| Mariner | CVE-2026-56154 | Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:…} | Critical |
| Mariner | CVE-2026-56851 | Panic parsing crafted input in x/text/secure/precis in golang.org/x/text | Important |
| Mariner | CVE-2026-56449 | Apache HTTP Server: mod_proxy_html: crash in dump_content | Moderate |
| Mariner | CVE-2026-46571 | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file. | Moderate |
| Mariner | CVE-2026-46570 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata. | Important |
| Mariner | CVE-2026-46572 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory. | Important |
| Mariner | CVE-2026-47360 | Apache HTTP Server: mod_session: Session cookie not removed during internal redirect | Important |
| Mariner | CVE-2026-46729 | Apache HTTP Server: mod_heartmonitor denial of service | Important |
| Mariner | CVE-2026-98302 | net: fddi: skfp: fix NULL deref when setting the MAC address while down | Moderate |
| Mariner | CVE-2026-98301 | net: bridge: mst: move switchdev call outside rcu | Critical |
| Mariner | CVE-2026-98300 | tcp: Don’t call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). | Moderate |
| Mariner | CVE-2026-98306 | seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation | Moderate |
| Mariner | CVE-2026-98304 | net: bcmgenet: restore the hardware filters on open | Critical |
| Mariner | CVE-2026-98303 | ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup | Critical |
| Mariner | CVE-2026-98294 | Bluetooth: hci_qca: Do not write to the serial port after it is closed | Moderate |
| Mariner | CVE-2026-98293 | Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() | Moderate |
| Mariner | CVE-2026-98292 | Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access | Critical |
| Mariner | CVE-2026-98299 | tcp: do not let tcp_rmem be set below 4096 | Moderate |
| Mariner | CVE-2026-98298 | dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() | Critical |
| Mariner | CVE-2026-98295 | Bluetooth: coredump: Quiesce dump work on unregister | Critical |
| Mariner | CVE-2026-98307 | wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() | Moderate |
| Mariner | CVE-2026-98320 | netfilter: flowtable: hold reference on ct until flow is released | Critical |
| Mariner | CVE-2026-98319 | drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr | Critical |
| Mariner | CVE-2026-98317 | neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. | Critical |
| Mariner | CVE-2026-98323 | RDMA/siw: Bound fragmented header copies by the remaining length | Critical |
| Mariner | CVE-2026-98322 | netfilter: nft_nat: fully initialise new_addr in netmap setup | Critical |
| Mariner | CVE-2026-98321 | netfilter: nf_nat: unregister and release hooks on error | Critical |
| Mariner | CVE-2026-98311 | wifi: virt_wifi: don’t transfer operstate before register | Critical |
| Mariner | CVE-2026-98309 | drm/vc4: Use managed KMS polling to fix UAF on unbind | Important |
| Mariner | CVE-2026-98308 | ALSA: hda: trace PCM open only after assigning a stream | Critical |
| Mariner | CVE-2026-98316 | ALSA: bcd2000: Fix race between rawmidi and disconnect | Critical |
| Mariner | CVE-2026-98314 | ALSA: pcm: set timer->private_data before registering the PCM timer | Moderate |
| Mariner | CVE-2026-98312 | ALSA: 6fire: fix OOB write from device-reported iso length | Moderate |
| Mariner | CVE-2026-98269 | btrfs: abort transaction on failure to update inode for hole punching and reflinking | Critical |
| Mariner | CVE-2026-98266 | ALSA: core: Fix potential UAF after asynchronous card release | Moderate |
| Mariner | CVE-2026-98265 | ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity | Moderate |
| Mariner | CVE-2026-98272 | net: mvpp2: prevent buffer overflow in page_pool allocation | Critical |
| Mariner | CVE-2026-98271 | net: skbuff: do not leave stale header offsets after pskb_carve() | Moderate |
| Mariner | CVE-2026-98270 | drm/amdgpu: check ras and obj before dereference | Critical |
| Mariner | CVE-2026-98261 | cifs: Fix server use-after-free in cifs_chan_skip_or_disable() | Important |
| Mariner | CVE-2026-98260 | exec: Cleanup POSIX timers right after de_thread() | Moderate |
| Mariner | CVE-2026-98257 | rds: ib: use rds_conn_drop() on protocol version mismatch | Moderate |
| Mariner | CVE-2026-98264 | ALSA: virtio: reset device before deleting virtqueues | Moderate |
| Mariner | CVE-2026-98263 | ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type | Critical |
| Mariner | CVE-2026-98262 | ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY | Moderate |
| Mariner | CVE-2026-98273 | x86/kprobes: Fix crash when probing CS CALL instructions | Moderate |
| Mariner | CVE-2026-98287 | pppoatm: ensure a writable skb header and linear data | Critical |
| Mariner | CVE-2026-98286 | drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown | Moderate |
| Mariner | CVE-2026-98285 | net: bridge: vlan: fix bugs caused by switchdev deletion errors | Moderate |
| Mariner | CVE-2026-98290 | Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup | Moderate |
| Mariner | CVE-2026-98289 | af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). | Critical |
| Mariner | CVE-2026-98288 | net: stmmac: fix TSO header length truncation | Critical |
| Mariner | CVE-2026-98279 | btrfs: handle lack of space when cleaning up verity items | Critical |
| Mariner | CVE-2026-98276 | net: lock the socket in sock_gettstamp() | Moderate |
| Mariner | CVE-2026-98275 | net: ethernet: cortina: Ack RX overrun interrupt correctly | Critical |
| Mariner | CVE-2026-98284 | netlink: do not free nlk->groups while lockless readers can use it | Moderate |
| Mariner | CVE-2026-98283 | KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() | Critical |
| Mariner | CVE-2026-98282 | powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba | Critical |
| Mariner | CVE-2026-98360 | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds | Moderate |
| Mariner | CVE-2026-98359 | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | Important |
| Mariner | CVE-2026-98358 | IB/iser: reject a remote invalidation of an unregistered direction | Moderate |
| Mariner | CVE-2026-98364 | xfrm: hold net_device reference under RCU in bundle creation | Moderate |
| Mariner | CVE-2026-98363 | firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS | Critical |
| Mariner | CVE-2026-98362 | clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate | Critical |
| Mariner | CVE-2026-98353 | RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables | Critical |
| Mariner | CVE-2026-98352 | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted | Critical |
| Mariner | CVE-2026-98351 | wifi: virt_wifi: free skb when disconnected | Critical |
| Mariner | CVE-2026-98357 | IB/isert: wait for deferred control PDU completions before releasing the connection | Moderate |
| Mariner | CVE-2026-98355 | RDMA/rtrs: guard against null kobj name | Moderate |
| Mariner | CVE-2026-98354 | RDMA/mad: Fix receive buffer leak when PKey enforcement fails | Moderate |
| Mariner | CVE-2026-98365 | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | Critical |
| Mariner | CVE-2026-98379 | netfilter: ip6t_rpfilter: reject routes without inet6_dev | Moderate |
| Mariner | CVE-2026-98378 | bpf: Skip unsettled links in link iterator | Important |
| Mariner | CVE-2026-98377 | vlan: require the MAC header to be present in __vlan_insert_inner_tag() | Moderate |
| Mariner | CVE-2026-98382 | bpf: Reject dev-bound-only programs on other devices | Moderate |
| Mariner | CVE-2026-98381 | veth: manage XDP program pointers during channel resize | Important |
| Mariner | CVE-2026-98380 | net/sched: reject IDR error pointers when deleting actions | Moderate |
| Mariner | CVE-2026-98368 | esp: downgrade zerocopy managed frags before mutating skb frags | Critical |
| Mariner | CVE-2026-98367 | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | Moderate |
| Mariner | CVE-2026-98366 | RDMA/rxe: validate access flags before swapping the MR’s PD | Important |
| Mariner | CVE-2026-98374 | tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() | Moderate |
| Mariner | CVE-2026-98370 | xfrm: fix compat ALLOCSPI request use-after-free | Critical |
| Mariner | CVE-2026-98369 | xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() | Moderate |
| Mariner | CVE-2026-98332 | wifi: mac80211: only operate on TDLS peers in the TDLS code | Critical |
| Mariner | CVE-2026-98331 | wifi: mac80211: unlist vifs when their netdev is unregistered | Critical |
| Mariner | CVE-2026-98330 | wifi: cfg80211: get the wiphy out of a dying network namespace | Critical |
| Mariner | CVE-2026-98335 | wifi: mac80211: abort chanswitch when leaving a mesh | Critical |
| Mariner | CVE-2026-98334 | wifi: mac80211: reset state when starting AP fails | Moderate |
| Mariner | CVE-2026-98333 | wifi: mac80211: reset the LED state when ifup fails | Critical |
| Mariner | CVE-2026-98383 | bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL | Important |
| Mariner | CVE-2026-98326 | wifi: mac80211: mesh: release the channel if start fails | Critical |
| Mariner | CVE-2026-98325 | wifi: mac80211: set up the TX info early to fix failure paths | Moderate |
| Mariner | CVE-2026-98329 | wifi: mac80211: don’t allow injecting frames wider than the chanctx | Critical |
| Mariner | CVE-2026-98328 | wifi: mac80211: add HE 6 GHz capability in the scan elems len | Critical |
| Mariner | CVE-2026-98327 | wifi: mac80211: mesh: reset the CSA state when leaving | Critical |
| Mariner | CVE-2026-98336 | wifi: mac80211: don’t offload TC setup on AP_VLAN interfaces | Critical |
| Mariner | CVE-2026-98345 | wifi: cfg80211: check IP header size in cfg80211_classify8021d() | Critical |
| Mariner | CVE-2026-98344 | dmaengine: Fix device kref underflow in dma_chan_put() | Moderate |
| Mariner | CVE-2026-98343 | dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() | Important |
| Mariner | CVE-2026-98349 | wifi: libipw: reject too-short beacon and probe responses | Moderate |
| Mariner | CVE-2026-98348 | wifi: libipw: reject too-short association responses | Critical |
| Mariner | CVE-2026-98347 | IB/IPoIB: Avoid restoring OPER_UP after multicast flush | Moderate |
| Mariner | CVE-2026-98339 | wifi: cfg80211: don’t filter by BSS type when removing stale entries | Critical |
| Mariner | CVE-2026-98338 | wifi: cfg80211: ibss: ref BSS entry for joined event | Critical |
| Mariner | CVE-2026-98337 | wifi: mac80211: don’t start a ROC while scanning | Critical |
| Mariner | CVE-2026-98342 | dmaengine: wait for RCU readers before releasing dma_device | Important |
| Mariner | CVE-2026-98341 | wifi: cfg80211: don’t free driver-owned scan requests | Critical |
| Mariner | CVE-2026-98340 | wifi: cfg80211: only group hidden BSSes with beacon entries | Critical |
| Mariner | CVE-2026-98255 | tcp: exclude old ACKs from tcp fast path | Critical |
| Mariner | CVE-2026-98179 | drm/amdgpu: fix rmmio iounmap skipped on device removal | Critical |
| Mariner | CVE-2026-97031 | Reject malformed ECH outer extension references in crypto/tls | Important |
| Mariner | CVE-2026-98198 | hwmon: (pwm-fan) Stop RPM timer before freeing tach data | Moderate |
| Mariner | CVE-2026-96990 | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound | Important |
| Mariner | CVE-2026-98180 | drm/msm: RCU-free the scheduler-containing ring and VM objects | Critical |
| Mariner | CVE-2026-98175 | smb: client: cancel reconnect work in clean_demultiplex_info() | Important |
| Mariner | CVE-2026-98174 | smb: client: fix rlist race and missing initialization | Critical |
| Mariner | CVE-2026-98176 | drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc | Critical |
| Mariner | CVE-2026-98177 | drm/amdkfd: Avoid integer underflow in EOP ring size calculation. | Critical |
| Mariner | CVE-2026-97032 | HTTP/2 server crash due to HPACK encoder race in net/http | Moderate |
| Mariner | CVE-2026-98181 | drm/gud: fix out-of-bounds write in gud_plane_atomic_check() | Critical |
| Mariner | CVE-2026-98195 | wifi: iwlegacy: fix broadcast stations deallocation | Moderate |
| Mariner | CVE-2026-98187 | wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST | Critical |
| Mariner | CVE-2026-98169 | smb: client: fix potential OOB read in smb3_enum_snapshots() | Moderate |
| Mariner | CVE-2026-98216 | IB/hfi1: Fix the PIO_CRED credit-return mmap | Moderate |
| Mariner | CVE-2026-98215 | selinux: preserve user SID across nested backing files | Critical |
| Mariner | CVE-2026-98197 | hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove | Moderate |
| Mariner | CVE-2026-98182 | wifi: mac80211: refuse to make a monitor active when it has no queue | Moderate |
| Mariner | CVE-2026-96294 | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection | Important |
| Mariner | CVE-2026-98186 | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | Critical |
| Mariner | CVE-2026-98185 | wifi: mwifiex: validate scan response extents | Moderate |
| Mariner | CVE-2026-98204 | Input: rmi_smbus – fix out-of-bounds read in rmi_smb_write_block() | Moderate |
| Mariner | CVE-2026-98203 | Input: soc_button_array – check btns_desc->package.count | Critical |
| Mariner | CVE-2026-98205 | Input: evdev – zero absinfo before partial copy in EVIOCSABS | Moderate |
| Mariner | CVE-2026-98170 | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() | Critical |
| Mariner | CVE-2026-98206 | Input: cyttsp5 – clamp the HID report size before memcpy | Critical |
| Mariner | CVE-2026-98168 | smb: client: fix reparse buffer bounds in cifs_query_reparse_point() | Critical |
| Mariner | CVE-2026-98199 | hwmon: (pmbus/core) increase number of phases and add new mask | Critical |
| Mariner | CVE-2026-98200 | hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() | Moderate |
| Mariner | CVE-2026-98202 | Input: synaptics-rmi4 – fix GPF in suspend and resume when unbound | Moderate |
| Mariner | CVE-2026-98201 | Input: zero ff_effect before compat copy in input_ff_effect_from_user | Moderate |
| Mariner | CVE-2026-98207 | mmc: spi: reset bytes_xfered before retrying CRC failures | Critical |
| Mariner | CVE-2026-98167 | smb: client: fix server->total_read for compound encrypted PDUs | Critical |
| Mariner | CVE-2026-98213 | mmc: core: Cancel SDIO IRQ work before freeing host | Moderate |
| Mariner | CVE-2026-98171 | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs | Critical |
| Mariner | CVE-2026-98173 | smb: client: fix use-after-free of iface in cifs_try_adding_channels() | Moderate |
| Mariner | CVE-2026-98172 | smb: client: fix smbd_connection leak on cifs_get_tcp_session() error | Critical |
| Mariner | CVE-2026-98209 | mmc: sdhci-of-aspeed: Remove children before releasing SDC resources | Critical |
| Mariner | CVE-2026-98208 | mmc: sdio_uart: fix xmit_fifo leak when the port table is full | Moderate |
| Mariner | CVE-2026-98210 | mmc: mxcmmc: cancel data work and watchdog on remove | Moderate |
| Mariner | CVE-2026-98212 | mmc: hsq: Fix use-after-free in retry work | Critical |
| Mariner | CVE-2026-98211 | mmc: mmci: Fix use-after-free in busy-timeout work | Critical |
| Mariner | CVE-2026-98217 | IB/mlx4: Fix use-after-free on pkey sysfs registration failure | Critical |
| Mariner | CVE-2026-98241 | ipv6: xfrm: use full sockets in local error paths | Moderate |
| Mariner | CVE-2026-98192 | wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown | Critical |
| Mariner | CVE-2026-98193 | wifi: libipw: reject TKIP frames without a full MIC | Critical |
| Mariner | CVE-2026-98245 | btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() | Important |
| Mariner | CVE-2026-98252 | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() | Critical |
| Mariner | CVE-2026-98236 | net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value | Moderate |
| Mariner | CVE-2026-98191 | wifi: wlcore: release runtime PM ref on regdomain config failure | Critical |
| Mariner | CVE-2026-98238 | net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() | Critical |
| Mariner | CVE-2026-98237 | net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain | Moderate |
| Mariner | CVE-2026-98251 | openvswitch: avoid reallocating confirmed conntrack labels | Critical |
| Mariner | CVE-2026-98247 | Bluetooth: hci_codec: validate vendor codec count length | Moderate |
| Mariner | CVE-2026-98248 | arm64: percpu: Fix LSE operations on {8,16}-bit types | Important |
| Mariner | CVE-2026-95512 | Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader | Moderate |
| Mariner | CVE-2026-98194 | wifi: libertas_tf: fix UAF in lbtf_free_adapter() | Important |
| Mariner | CVE-2026-96277 | Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception | Important |
| Mariner | CVE-2026-96287 | Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) | Important |
| Mariner | CVE-2026-98249 | arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc | Critical |
| Mariner | CVE-2026-98246 | Bluetooth: hci_sync: Serialize local codec list cleanup | Moderate |
| Mariner | CVE-2026-96286 | Apache Thrift: Perl servers end `serve()` when serving one connection fails | Important |
| Mariner | CVE-2026-98190 | wifi: wilc1000: fix out-of-bounds read in P2P public action frames | Important |
| Mariner | CVE-2026-98254 | swiotlb: use the adjusted address for the highmem page lookup | Critical |
| Mariner | CVE-2026-98227 | memstick: ms_block: destroy io_queue workqueue on removal | Moderate |
| Mariner | CVE-2026-98229 | xfrm: save input state data before secpath resets | Moderate |
| Mariner | CVE-2026-98231 | xfrm: serialize state GC with device state flush | Moderate |
| Mariner | CVE-2026-96292 | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) | Important |
| Mariner | CVE-2026-98214 | selinux: recheck intermediate backing files on mprotect() | Critical |
| Mariner | CVE-2026-98239 | net: lan743x: fix RX checksum use-after-free | Moderate |
| Mariner | CVE-2026-98218 | i2c: atr: fix dangling adapter pointer on add failure | Moderate |
| Mariner | CVE-2026-98222 | KEYS: encrypted: fix integer overflow of datablob_len | Critical |
| Mariner | CVE-2026-98221 | KEYS: trusted: Fix tpm2_load_cmd() boundary check | Critical |
| Mariner | CVE-2026-98232 | scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() | Critical |
| Mariner | CVE-2026-98188 | wifi: p54: validate curve data length in the calibration curve converters | Critical |
| Mariner | CVE-2026-96288 | Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) | Important |
| Mariner | CVE-2026-98234 | net/sched: hhf: cap hh_flows_limit at change time | Moderate |
| Mariner | CVE-2026-96289 | Apache Thrift: php `–gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard | Important |
| Mariner | CVE-2026-98233 | net/packet: clear RX owner on VNET header error | Critical |
| Mariner | CVE-2026-98189 | wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() | Moderate |
| Mariner | CVE-2026-98253 | RDMA/ucma: Serialize join and leave on copy_to_user failure | Critical |
| Microsoft Account | CVE-2026-85329 | Microsoft Account Elevation of Privilege Vulnerability | Important |
| Microsoft Account | CVE-2026-83847 | Microsoft Account Elevation of Privilege Vulnerability | Important |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-69454 | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability | Important |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-69577 | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability | Important |
| Microsoft Bluetooth Driver | CVE-2026-83868 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Bluetooth Driver | CVE-2026-96844 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Bluetooth Driver | CVE-2026-83776 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Bluetooth Driver | CVE-2026-83760 | Microsoft Bluetooth Driver Information Disclosure Vulnerability | Important |
| Microsoft Bookings | CVE-2026-94510 | Microsoft Bookings Elevation of Privilege Vulnerability | Critical |
| Microsoft COM for Windows | CVE-2026-69909 | Microsoft COM for Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Configuration Manager | CVE-2026-70049 | Microsoft Configuration Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Configuration Manager | CVE-2026-88075 | Configuration Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Dataverse | CVE-2026-88131 | Microsoft Dataverse Remote Code Execution Vulnerability | Critical |
| Microsoft Defender | CVE-2026-105726 | Microsoft Defender Information Disclosure Vulnerability | Important |
| Microsoft Defender | CVE-2026-70264 | Microsoft Defender Information Disclosure Vulnerability | Important |
| Microsoft Defender for Endpoint | CVE-2026-102204 | Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability | Important |
| Microsoft Digest Authentication | CVE-2026-88158 | Microsoft Digest Authentication Information Disclosure Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-87692 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-87696 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-87695 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-77910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-96940 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-70279 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-70571 | Microsoft Exchange Server Remote Code Execution Vulnerability | Critical |
| Microsoft Failover Cluster Virtual Driver | CVE-2026-96864 | Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-105731 | Microsoft Office Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-100215 | Microsoft Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Graphics Component | CVE-2026-102209 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-85338 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-85881 | Microsoft Office Graphics Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-70123 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Input Method Editor (IME) | CVE-2026-88101 | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability | Important |
| Microsoft Internet Messaging API | CVE-2026-83919 | Microsoft Internet Messaging API Remote Code Execution Vulnerability | Important |
| Microsoft Internet Messaging API | CVE-2026-83778 | Microsoft Internet Messaging API Remote Code Execution Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-87710 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-83722 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important |
| Microsoft MPEG-2 Video Extension | CVE-2026-70343 | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-88196 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-88197 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-102850 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-102849 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105593 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105597 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105596 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105595 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105714 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105591 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105717 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-94506 | Microsoft Office Access Information Disclosure Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105598 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105716 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-105592 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Click-To-Run | CVE-2026-88109 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Important |
| Microsoft Office Click-To-Run | CVE-2026-97774 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Important |
| Microsoft Office Click-To-Run | CVE-2026-85340 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Important |
| Microsoft Office Click-To-Run | CVE-2026-70276 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97747 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97750 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97748 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97746 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-69922 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-105718 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97753 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97752 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97751 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97745 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97754 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97742 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97008 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97007 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97010 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97009 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-100211 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-100210 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-100209 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97004 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97003 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97739 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97738 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97741 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97740 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97017 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97014 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97011 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97743 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-100212 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70219 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70214 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88195 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88201 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97780 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97777 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97776 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97779 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97778 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-88192 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88153 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88154 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-70254 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88151 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88145 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88184 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88190 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88172 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-88175 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97775 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97761 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97760 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97762 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97765 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97763 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97756 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97755 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97757 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97759 | Microsoft Office Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-97758 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-77902 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97769 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97773 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97770 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97772 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97771 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97766 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97768 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-97767 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office OneNote | CVE-2026-102858 | Microsoft Office OneNote Remote Code Execution Vulnerability | Important |
| Microsoft Office OneNote | CVE-2026-96997 | Microsoft Office OneNote Elevation of Privilege Vulnerability | Important |
| Microsoft Office OneNote | CVE-2026-97781 | Microsoft Office OneNote Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-88156 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-70281 | Microsoft Office Outlook Information Disclosure Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-97016 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-70282 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-70291 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-70242 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-97012 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-70257 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-97749 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-70256 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-88144 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-88183 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-88203 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-97005 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-105599 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-88178 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-97744 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-88207 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-70215 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-102862 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70267 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102860 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70202 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102864 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88206 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88208 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88209 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88204 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88198 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88200 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102861 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70217 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-85932 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70246 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-105013 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-105720 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-105719 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-85900 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-105713 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70251 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88166 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88164 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Unknown |
| Microsoft Office SharePoint | CVE-2026-70266 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102865 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-88155 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102866 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Critical |
| Microsoft Office SharePoint | CVE-2026-88163 | Microsoft Office SharePoint Remote Code Execution Vulnerability | None |
| Microsoft Office SharePoint | CVE-2026-70259 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102859 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69943 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-70298 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-102863 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-96044 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-97782 | Microsoft Office SharePoint Tampering Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-97783 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office Visio | CVE-2026-102855 | Microsoft Office Visio Remote Code Execution Vulnerability | Critical |
| Microsoft Office Visio | CVE-2026-102857 | Microsoft Office Visio Remote Code Execution Vulnerability | Critical |
| Microsoft Office Visio | CVE-2026-102856 | Microsoft Office Visio Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-70263 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70220 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-105715 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70300 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-88169 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-102867 | Microsoft Office Word Information Disclosure Vulnerability | Low |
| Microsoft Office Word | CVE-2026-88150 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-97001 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-83891 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70301 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-88167 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70206 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70302 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70287 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-96996 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70269 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-88202 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-88210 | Microsoft Office Word Security Feature Bypass Vulnerability | Important |
| Microsoft Office Word | CVE-2026-96995 | Microsoft Office Word Elevation of Privilege Vulnerability | Important |
| Microsoft Office Word | CVE-2026-70268 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-88186 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-88185 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Partner Center | CVE-2026-96207 | Microsoft Partner Center Elevation of Privilege Vulnerability | Critical |
| Microsoft PostScript Printer Driver | CVE-2026-70092 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | Important |
| Microsoft PostScript Printer Driver | CVE-2026-70110 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | Important |
| Microsoft PostScript Printer Driver | CVE-2026-108467 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | Critical |
| Microsoft PostScript Printer Driver | CVE-2026-70109 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | Important |
| Microsoft PostScript Printer Driver | CVE-2026-70147 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | Critical |
| Microsoft PostScript Printer Driver | CVE-2026-70153 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | Critical |
| Microsoft Power Apps | CVE-2026-70213 | Microsoft Power Apps Remote Code Execution Vulnerability | Important |
| Microsoft PowerShell | CVE-2026-96251 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| Microsoft PowerShell | CVE-2026-96303 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important |
| Microsoft PowerToys | CVE-2026-83681 | Microsoft PowerToys Tampering Vulnerability | Important |
| Microsoft PowerToys | CVE-2026-96188 | Microsoft PowerToys Elevation of Privilege Vulnerability | Important |
| Microsoft QUIC | CVE-2026-85790 | Microsoft QUIC Information Disclosure Vulnerability | Important |
| Microsoft QUIC | CVE-2026-103577 | Microsoft QUIC Security Feature Bypass Vulnerability | Important |
| Microsoft QUIC | CVE-2026-105016 | Microsoft QUIC Remote Code Execution Vulnerability | Critical |
| Microsoft QUIC | CVE-2026-100219 | Microsoft QUIC Remote Code Execution Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2026-88193 | Microsoft Scripting Engine Elevation of Privilege Vulnerability | Important |
| Microsoft Streaming Service | CVE-2026-69964 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Streaming Service | CVE-2026-69966 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Streaming Service | CVE-2026-69963 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Streaming Service | CVE-2026-69970 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Trace Data Helper | CVE-2026-70260 | Microsoft Trace Data Helper Information Disclosure Vulnerability | Important |
| Microsoft Trace Data Helper | CVE-2026-70261 | Microsoft Trace Data Helper Information Disclosure Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2026-102199 | Microsoft Windows Codecs Library Denial of Service Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2026-108400 | HEVC Video Extensions Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-85814 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-96952 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-70278 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-70131 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-83517 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-102201 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-70258 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-70044 | Microsoft Windows Media Foundation Information Disclosure Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-96186 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | Important |
| Microsoft Windows PDF | CVE-2026-108457 | Microsoft Windows PDF Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Search Component | CVE-2026-70115 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70141 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83920 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83921 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-108136 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70150 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83850 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70173 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83829 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70177 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70136 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70156 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83686 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83564 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83704 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-88182 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83575 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-96324 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-96911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-96937 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-96910 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83570 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83574 | Windows Search Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-83725 | Microsoft Windows Search Component Remote Code Execution Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70086 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-105010 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-88191 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-85869 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-88160 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft XML | CVE-2026-83935 | Microsoft XML Remote Code Execution Vulnerability | Important |
| Microsoft XML | CVE-2026-83914 | Microsoft XML Remote Code Execution Vulnerability | Important |
| Network Device Enrollment Service (NDES) | CVE-2026-96866 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability | Important |
| Network Device Enrollment Service (NDES) | CVE-2026-85323 | Network Device Enrollment Service (NDES) Spoofing Vulnerability | Important |
| Network Device Enrollment Service (NDES) | CVE-2026-96861 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability | Important |
| Network Device Enrollment Service (NDES) | CVE-2026-69802 | Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability | Critical |
| Network Policy Server (NPS) | CVE-2026-85799 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-85371 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-96246 | Network Policy Server (NPS) Information Disclosure Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-85811 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-85806 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-83655 | Network Policy Server (NPS) Denial of Service Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-70207 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| Network Policy Server (NPS) | CVE-2026-100222 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-83769 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-97816 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-83754 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-83871 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-70163 | Microsoft OpenSSH for Windows Denial of Service Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-83923 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-97811 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-88157 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important |
| Python | CVE-2026-85864 | Python Elevation of Privilege Vulnerability | Important |
| Quality Windows Audio/Video Experience (QWAVE) service | CVE-2026-69977 | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability | Important |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-85943 | Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability | Important |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-69789 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Remote Access Point-to-Point Protocol (PPP) EAP-TLS | CVE-2026-84015 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-70012 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69986 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69984 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-103575 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-85337 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69976 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-83688 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-108458 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69995 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69994 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69996 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-97789 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69997 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69991 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-70006 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69998 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69987 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-70004 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69988 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Display Driver | CVE-2026-96321 | Remote Desktop Display Driver Information Disclosure Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-70187 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Critical |
| Remote Desktop Gateway Service | CVE-2026-84007 | Remote Desktop Gateway Service Information Disclosure Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-70033 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-84012 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-100218 | Remote Desktop Gateway Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-88125 | Role: DNS Server Denial of Service Vulnerability | Important |
| Role: DNS Server | CVE-2026-88123 | Role: DNS Server Denial of Service Vulnerability | Important |
| Role: DNS Server | CVE-2026-97844 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97843 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-88129 | Role: DNS Server Denial of Service Vulnerability | Important |
| Role: DNS Server | CVE-2026-97839 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97838 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97842 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97841 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97840 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-70071 | Role: DNS Server Tampering Vulnerability | Important |
| Role: DNS Server | CVE-2026-70127 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-88112 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-88114 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-70087 | Role: DNS Server Security Feature Bypass Vulnerability | Important |
| Role: DNS Server | CVE-2026-88116 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-70085 | Role: DNS Server Tampering Vulnerability | Important |
| Role: DNS Server | CVE-2026-70244 | Windows DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-88122 | Role: DNS Server Denial of Service Vulnerability | Important |
| Role: DNS Server | CVE-2026-70083 | Role: DNS Server Tampering Vulnerability | Important |
| Role: DNS Server | CVE-2026-96113 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-70167 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-108127 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-108128 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97824 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97825 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-83889 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-97827 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-108129 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97817 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-96926 | Role: DNS Server Tampering Vulnerability | Important |
| Role: DNS Server | CVE-2026-83869 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-97820 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-103560 | Role: DNS Server Tampering Vulnerability | Important |
| Role: DNS Server | CVE-2026-97819 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97823 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-85903 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-97821 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97822 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97832 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97833 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97837 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97831 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97834 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-88130 | Role: DNS Server Denial of Service Vulnerability | Important |
| Role: DNS Server | CVE-2026-97826 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97835 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97836 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97828 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-97829 | Role: DNS Server Information Disclosure Vulnerability | Important |
| Role: DNS Server | CVE-2026-83642 | Windows Domain Name Service Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-83635 | Role: DNS Server Denial of Service Vulnerability | Important |
| RPC Endpoint Mapper Service | CVE-2026-96300 | RPC Endpoint Mapper Service Denial of Service Vulnerability | Important |
| RPC Runtime | CVE-2026-83910 | RPC Runtime Library Remote Code Execution Vulnerability | Important |
| RPC Runtime | CVE-2026-83515 | RPC Runtime Information Disclosure Vulnerability | Important |
| RPC Runtime | CVE-2026-83908 | RPC Runtime Elevation of Privilege Vulnerability | Important |
| RPC Runtime | CVE-2026-83518 | RPC Runtime Elevation of Privilege Vulnerability | Important |
| RPC Runtime | CVE-2026-88219 | RPC Runtime Library Remote Code Execution Vulnerability | Important |
| RPC Runtime | CVE-2026-102203 | RPC Runtime Remote Code Execution Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-83506 | Servicing Stack Updates Elevation of Privilege Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-96939 | Servicing Stack Updates Elevation of Privilege Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-83863 | Servicing Stack Updates Elevation of Privilege Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-85318 | Servicing Stack Updates Elevation of Privilege Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-83719 | Servicing Stack Updates Information Disclosure Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-85365 | Servicing Stack Updates Elevation of Privilege Vulnerability | Important |
| Servicing Stack Updates | CVE-2026-85835 | Servicing Stack Updates Information Disclosure Vulnerability | Important |
| Skype for Business and Microsoft Lync | CVE-2026-70297 | Skype for Business Remote Code Execution Vulnerability | Important |
| Skype for Business and Microsoft Lync | CVE-2026-85873 | Skype for Business Elevation of Privilege Vulnerability | Important |
| Skype for Business and Microsoft Lync | CVE-2026-83746 | Skype for Business Elevation of Privilege Vulnerability | Important |
| Software Protection Platform (SPP) | CVE-2026-108464 | Software Protection Platform (SPP) Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-88089 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-85886 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-85876 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-70189 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-85888 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-88088 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-88085 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-88086 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-85919 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-88084 | Microsoft SQL Server Denial of Service Vulnerability | Important |
| SQL Server | CVE-2026-88081 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-96956 | SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-88083 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-88082 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-68883 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-94512 | SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67626 | Microsoft SQL Server Denial of Service Vulnerability | Important |
| SQL Server | CVE-2026-83945 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-65674 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67628 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-94520 | Microsoft SQL Server Denial of Service Vulnerability | Important |
| SQL Server | CVE-2026-67625 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQLite | CVE-2026-69867 | SQLite Elevation of Privilege Vulnerability | Important |
| SysInternals | CVE-2026-105732 | SysInternals Elevation of Privilege Vulnerability | Important |
| SysInternals | CVE-2026-105729 | SysInternals Elevation of Privilege Vulnerability | Important |
| SysInternals | CVE-2026-100205 | SysInternals Elevation of Privilege Vulnerability | Important |
| Virtual Hard Disk (VHD) Miniport Driver | CVE-2026-70252 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important |
| Virtual Hard Disk (VHD) Miniport Driver | CVE-2026-109453 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability | Important |
| Virtual Hard Disk (VHD) Miniport Driver | CVE-2026-103555 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability | Important |
| Visual Studio Code | CVE-2026-102232 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-102233 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-70098 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-69370 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-102231 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-102851 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-102229 | Visual Studio Code Information Disclosure Vulnerability | Important |
| Visual Studio Code | CVE-2026-102238 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2026-102234 | Visual Studio Code Security Feature Bypass Vulnerability | Important |
| Visual Studio Code | CVE-2026-102235 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Visual Studio Tools for Applications and SQL Server Management Studio | CVE-2026-103572 | Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability | Important |
| WebDAV | CVE-2026-85370 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-70262 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-85828 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-96847 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-85827 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-102217 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-87714 | WebDAV Security Feature Bypass Vulnerability | Important |
| WebDAV | CVE-2026-88135 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-96843 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-96846 | WebDAV Information Disclosure Vulnerability | Important |
| WebDAV | CVE-2026-88136 | Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability | Important |
| WebDAV | CVE-2026-88126 | WebDAV Elevation of Privilege Vulnerability | Important |
| WebDAV | CVE-2026-88137 | WebDAV Information Disclosure Vulnerability | Important |
| Windows Advanced Rasterization Platform | CVE-2026-84019 | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability | Important |
| Windows Aggregated Data Platform Service | CVE-2026-83870 | Windows Aggregated Data Platform Service Information Disclosure Vulnerability | Important |
| Windows AI | CVE-2026-69923 | Windows AI Elevation of Privilege Vulnerability | Important |
| Windows ALPC | CVE-2026-83917 | Windows ALPC Elevation of Privilege Vulnerability | Critical |
| Windows ALPC | CVE-2026-85866 | Windows ALPC Information Disclosure Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70237 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-88149 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70205 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70245 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70225 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70195 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-70168 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Ancillary Function Driver for WinSock | CVE-2026-83738 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important |
| Windows Application Compatibility Cache | CVE-2026-72955 | Windows Application Compatibility Cache Elevation of Privilege Vulnerability | Important |
| Windows AppX Deployment Extensions | CVE-2026-69945 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-85849 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-69979 | Windows AppX Deployment Service Security Feature Bypass Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-69914 | Windows AppX Deployment Service Information Disclosure Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-69969 | Windows AppX Deployment Service Information Disclosure Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-85934 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | Important |
| Windows AppX Deployment Service | CVE-2026-69905 | Windows AppX Deployment Service Tampering Vulnerability | Important |
| Windows Assigned Access | CVE-2026-96220 | Windows Assigned Access Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-70140 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-96314 | Windows Audio Service Information Disclosure Vulnerability | Important |
| Windows Audio Service | CVE-2026-83644 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-70230 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-97799 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-70118 | Windows Audio Service Elevation of Privilege Vulnerability | Important |
| Windows Audio Service | CVE-2026-83571 | Windows Audio Service Information Disclosure Vulnerability | Important |
| Windows Autopilot | CVE-2026-108134 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Autopilot | CVE-2026-96215 | Windows Autopilot Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88173 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88152 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-85843 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88118 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-85848 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88159 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88146 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-85832 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88121 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | Important |
| Windows Background Intelligent Transfer Service (BITS) | CVE-2026-88142 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | Important |
| Windows Backup Engine | CVE-2026-70184 | Windows Backup Engine Elevation of Privilege Vulnerability | Important |
| Windows Backup Engine | CVE-2026-108135 | Windows Backup Engine Elevation of Privilege Vulnerability | Important |
| Windows Backup Engine | CVE-2026-62687 | Windows Backup Engine Information Disclosure Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-88168 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-83900 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-70299 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-83852 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-70274 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-85812 | Windows Bind Filter Driver Information Disclosure Vulnerability | Important |
| Windows Bind Filter Driver | CVE-2026-83692 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Biometric Service | CVE-2026-85831 | Windows Biometric Service Information Disclosure Vulnerability | Important |
| Windows BitLocker | CVE-2026-83634 | Windows BitLocker Elevation of Privilege Vulnerability | Important |
| Windows BitLocker | CVE-2026-88070 | Windows BitLocker Elevation of Privilege Vulnerability | Important |
| Windows BitLocker | CVE-2026-96909 | Windows BitLocker Remote Code Execution Vulnerability | Important |
| Windows BitLocker | CVE-2026-85920 | Windows BitLocker Elevation of Privilege Vulnerability | Important |
| Windows BitLocker | CVE-2026-83500 | Windows BitLocker Security Feature Bypass Vulnerability | Important |
| Windows Bluetooth A2DP driver | CVE-2026-83838 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability | Important |
| Windows Bluetooth Port Driver | CVE-2026-83827 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Important |
| Windows Bluetooth Port Driver | CVE-2026-70126 | Windows Bluetooth Port Driver Remote Code Execution | Important |
| Windows Bluetooth Port Driver | CVE-2026-87713 | Windows Bluetooth Port Driver Remote Code Execution | Important |
| Windows Bluetooth Service | CVE-2026-83777 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important |
| Windows Bluetooth Service | CVE-2026-83739 | Windows Bluetooth Service Remote Code Execution Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-96919 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-103554 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-88105 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-102195 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-88113 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-103567 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-102193 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-103565 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-105722 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-88103 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-97806 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-85938 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-97807 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-97809 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-97808 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-102196 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-70148 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-102197 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-70122 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Broadcast DVR User Service | CVE-2026-108461 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important |
| Windows Camera Frame Server Monitor | CVE-2026-85803 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Important |
| Windows Camera Frame Server Monitor | CVE-2026-83771 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Important |
| Windows Camera Frame Server Monitor | CVE-2026-83753 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Important |
| Windows Cash Drawer Protocol Provider | CVE-2026-85367 | Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability | Important |
| Windows CCFFilter Driver | CVE-2026-83780 | Windows CCFFilter Driver Remote Code Execution Vulnerability | Important |
| Windows CD-ROM Driver | CVE-2026-85377 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important |
| Windows CD-ROM Driver | CVE-2026-70041 | Windows CD-ROM Driver Information Disclosure Vulnerability | Important |
| Windows CD-ROM Driver | CVE-2026-70275 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability | Important |
| Windows CD-ROM Driver | CVE-2026-83888 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important |
| Windows Certificates | CVE-2026-69840 | Windows Certificates Elevation of Privilege Vulnerability | Important |
| Windows Certificates | CVE-2026-69850 | Windows Certificates Elevation of Privilege Vulnerability | Important |
| Windows Client for NFS | CVE-2026-69949 | Windows Client for NFS Elevation of Privilege Vulnerability | Important |
| Windows Client for NFS | CVE-2026-70113 | Windows Client for NFS Elevation of Privilege Vulnerability | Important |
| Windows Client for NFS | CVE-2026-69955 | Windows Client for NFS Information Disclosure Vulnerability | Important |
| Windows Client for NFS | CVE-2026-69940 | Windows Client for NFS Information Disclosure Vulnerability | Important |
| Windows Client License Service | CVE-2026-100201 | Windows Client License Service Elevation of Privilege Vulnerability | Important |
| Windows Client License Service | CVE-2026-96912 | Windows Client License Service Elevation of Privilege Vulnerability | Important |
| Windows Client Side Caching driver (csc.sys) | CVE-2026-96948 | Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability | Important |
| Windows Client Side Caching driver (csc.sys) | CVE-2026-70149 | Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability | Important |
| Windows Client-Side Caching (CSC) Service | CVE-2026-83698 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | Important |
| Windows Client-Side Caching (CSC) Service | CVE-2026-83580 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | Important |
| Windows Client-Side Caching (CSC) Service | CVE-2026-83699 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | Important |
| Windows Client-Side Caching (CSC) Service | CVE-2026-70068 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | Important |
| Windows Clipboard Server | CVE-2026-69795 | Windows Clipboard Server Elevation of Privilege Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-83764 | Windows Clipboard User Service Information Disclosure Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-85912 | Clipboard User Service Elevation of Privilege Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-85863 | Clipboard User Service Elevation of Privilege Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-85861 | Clipboard User Service Elevation of Privilege Vulnerability | Important |
| Windows Clipboard User Service | CVE-2026-83893 | Windows Clipboard User Service Information Disclosure Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-88107 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-88106 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Cloud Files Mini Filter Driver | CVE-2026-83696 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows COM+ Event System Service | CVE-2026-83830 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Important |
| Windows COM+ Event System Service | CVE-2026-83848 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Important |
| Windows COM+ Event System Service | CVE-2026-96933 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Important |
| Windows COM+ Event System Service | CVE-2026-83785 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-85870 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-85868 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-85355 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-83835 | Windows Common Log File System Driver Information Disclosure Vulnerability | Important |
| Windows Common Log File System Driver | CVE-2026-70233 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Composite Image File System | CVE-2026-85824 | Windows Composite Image File System Elevation of Privilege Vulnerability | Important |
| Windows Composite Image File System | CVE-2026-85823 | Windows Composite Image File System Elevation of Privilege Vulnerability | Important |
| Windows Connected Devices Platform Service | CVE-2026-70169 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Windows Connected User Experiences and Telemetry | CVE-2026-83687 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important |
| Windows Console Driver | CVE-2026-70223 | Windows Console Driver Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver | CVE-2026-70270 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-97787 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-97790 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-97792 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-97810 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-102202 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | CVE-2026-97794 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | Important |
| Windows Core Messaging | CVE-2026-83587 | Windows Core Messaging Elevation of Privilege Vulnerability | Important |
| Windows Core Messaging | CVE-2026-69918 | Windows Core Messaging Elevation of Privilege Vulnerability | Important |
| Windows Credential Guard | CVE-2026-70580 | Windows Credential Guard Spoofing Vulnerability | Important |
| Windows Credential Manager | CVE-2026-69736 | Windows Credential Manager Elevation of Privilege Vulnerability | Important |
| Windows Credential Providers | CVE-2026-103568 | Windows Credential Providers Elevation of Privilege Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-69919 | Windows Cryptographic Services Information Disclosure Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-70055 | Windows Cryptographic Services Information Disclosure Vulnerability | Important |
| Windows Cryptographic Services | CVE-2026-70014 | Windows Cryptographic Services Remote Code Execution Vulnerability | Important |
| Windows DCOM Server | CVE-2026-88096 | Windows DCOM Server Elevation of Privilege Vulnerability | Important |
| Windows Defender Firewall Service | CVE-2026-83679 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Important |
| Windows Deployment Services | CVE-2026-88174 | Windows Deployment Services Remote Code Execution Vulnerability | Critical |
| Windows Device Association Service | CVE-2026-70227 | Windows Device Association Service Information Disclosure Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85336 | Windows Device Association Service Information Disclosure Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85815 | Windows Device Association Service Information Disclosure Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85352 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85342 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-96854 | Windows Device Association Service Information Disclosure Vulnerability | Important |
| Windows Device Association Service | CVE-2026-84014 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-83710 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85332 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85331 | Windows Device Association Service Information Disclosure Vulnerability | Important |
| Windows Device Association Service | CVE-2026-85904 | Windows Device Association Service Elevation of Privilege Vulnerability | Important |
| Windows Device Install Service | CVE-2026-83792 | Windows Device Install Service Elevation of Privilege Vulnerability | Important |
| Windows DHCP Client | CVE-2026-83677 | Windows DHCP Client Denial of Service Vulnerability | Important |
| Windows DHCP Client | CVE-2026-70250 | Windows DHCP Client Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-70058 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows DHCP Server | CVE-2026-85841 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows DHCP Server | CVE-2026-83665 | Windows DHCP Server Denial of Service Vulnerability | Important |
| Windows DHCP Server | CVE-2026-88120 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-70069 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows DHCP Server | CVE-2026-70066 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-83691 | Windows DHCP Server Elevation of Privilege Vulnerability | Important |
| Windows DHCP Server | CVE-2026-69830 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows DHCP Server | CVE-2026-88171 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-96934 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-85865 | Windows DHCP Server Security Feature Bypass Vulnerability | Important |
| Windows DHCP Server | CVE-2026-83787 | Windows DHCP Server Security Feature Bypass Vulnerability | Important |
| Windows DHCP Server | CVE-2026-88119 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-88117 | Windows DHCP Server Remote Code Execution Vulnerability | Critical |
| Windows DHCP Server | CVE-2026-70201 | Windows DHCP Server Denial of Service Vulnerability | Important |
| Windows DHCP Server | CVE-2026-96320 | Windows DHCP Server Remote Code Execution Vulnerability | Important |
| Windows Diagnostic Policy Service | CVE-2026-83915 | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-83922 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-70151 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-85902 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-85906 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-70021 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-83902 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-83896 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-83912 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Direct Composition | CVE-2026-83903 | Windows Direct Composition Elevation of Privilege Vulnerability | Important |
| Windows Distributed File System (DFS) | CVE-2026-105723 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Important |
| Windows Distributed File System (DFS) | CVE-2026-85798 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | Important |
| Windows Distributed File System (DFS) | CVE-2026-85931 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | Important |
| Windows Distributed File System (DFS) | CVE-2026-96938 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Important |
| Windows DNS | CVE-2026-70166 | Windows DNS Denial of Service Vulnerability | Important |
| Windows DNS | CVE-2026-70082 | Windows DNS Denial of Service Vulnerability | Important |
| Windows DNS | CVE-2026-70155 | Windows DNS Denial of Service Vulnerability | Important |
| Windows DNS | CVE-2026-70119 | Windows DNS Remote Code Execution Vulnerability | Important |
| Windows DNS | CVE-2026-70074 | Windows DNS Information Disclosure Vulnerability | Important |
| Windows DNS | CVE-2026-70079 | Windows DNS Denial of Service Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88177 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88189 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-85853 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-83726 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88179 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88194 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88128 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88181 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88188 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-85854 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-83765 | Windows DWM Core Library Information Disclosure Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-88180 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows DWM Core Library | CVE-2026-85855 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important |
| Windows EAPHost Service | CVE-2026-84016 | Windows EAPHost Service Elevation of Privilege Vulnerability | Important |
| Windows Embedded Mode Service | CVE-2026-96932 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Important |
| Windows Embedded Mode Service | CVE-2026-85914 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-83565 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-88162 | Windows Encrypting File System (EFS) Tampering Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-83759 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-85791 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-83784 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important |
| Windows Encrypting File System (EFS) | CVE-2026-83683 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important |
| Windows Enterprise App Management | CVE-2026-69452 | Windows Enterprise App Management Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83715 | Windows Error Reporting Tampering Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83519 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83689 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-69354 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83669 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83840 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-97815 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83643 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-70103 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83658 | Windows Error Reporting Information Disclosure Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83693 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-97798 | Windows Error Reporting Service Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-69363 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-69387 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83750 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83758 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83747 | Windows Error Reporting Information Disclosure Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83916 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Error Reporting | CVE-2026-85354 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-85800 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83826 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Windows Error Reporting | CVE-2026-83748 | Windows Error Reporting Remote Code Execution Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-95904 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-83856 | Windows Event Logging Service Remote Code Execution Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-83695 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows Event Logging Service | CVE-2026-83723 | Windows Event Logging Service Information Disclosure Vulnerability | Important |
| Windows Event Tracing | CVE-2026-70134 | Windows Event Tracing Elevation of Privilege Vulnerability | Important |
| Windows Event Tracing | CVE-2026-83836 | Windows Event Tracing Remote Code Execution Vulnerability | Important |
| Windows Event Tracing | CVE-2026-83707 | Windows Event Tracing Elevation of Privilege Vulnerability | Important |
| Windows Event Tracing | CVE-2026-83874 | Windows Event Tracing Remote Code Execution Vulnerability | Important |
| Windows Event Tracing | CVE-2026-70235 | Windows Event Tracing Spoofing Vulnerability | Important |
| Windows Event Viewer | CVE-2026-85840 | Windows Event Viewer Information Disclosure Vulnerability | Important |
| Windows exFAT File System | CVE-2026-83881 | Windows exFAT File System Elevation of Privilege Vulnerability | Important |
| Windows exFAT File System | CVE-2026-85822 | Windows exFAT File System Elevation of Privilege Vulnerability | Important |
| Windows Failover Cluster | CVE-2026-88102 | Microsoft Failover Cluster Remote Code Execution Vulnerability | Important |
| Windows Failover Cluster | CVE-2026-102192 | Windows Failover Cluster Denial of Service Vulnerability | Important |
| Windows Failover Cluster | CVE-2026-88099 | Windows Failover Cluster Denial of Service Vulnerability | Important |
| Windows Failover Cluster | CVE-2026-96945 | Windows Failover Cluster Denial of Service Vulnerability | Important |
| Windows Fast FAT Driver | CVE-2026-85826 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | Important |
| Windows Fast FAT Driver | CVE-2026-70277 | Windows Fast FAT File System Driver Information Disclosure Vulnerability | Important |
| Windows Fax and Scan Service | CVE-2026-87707 | Windows Fax and Scan Service Elevation of Privilege Vulnerability | Important |
| Windows GDI | CVE-2026-83860 | Windows GDI Denial of Service Vulnerability | Important |
| Windows GDI | CVE-2026-70089 | Windows GDI Remote Code Execution Vulnerability | Important |
| Windows GDI | CVE-2026-83929 | Windows GDI Remote Code Execution Vulnerability | Important |
| Windows GDI | CVE-2026-83651 | Windows GDI Information Disclosure Vulnerability | Important |
| Windows GDI | CVE-2026-85797 | Windows GDI Information Disclosure Vulnerability | Important |
| Windows GDI | CVE-2026-69884 | Windows GDI Elevation of Privilege Vulnerability | Important |
| Windows GDI+ | CVE-2026-83934 | Windows GDI+ Remote Code Execution Vulnerability | Critical |
| Windows Geotag Broker | CVE-2026-83583 | Windows Geotag Broker Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-83582 | Windows Graphics Kernel Information Disclosure Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-88110 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-102194 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-96118 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Important |
| Windows Graphics Kernel | CVE-2026-88073 | Windows Graphics Kernel Elevation of Privilege Vulnerability | Critical |
| Windows Group Policy | CVE-2026-83932 | Windows Group Policy Elevation of Privilege Vulnerability | Important |
| Windows Group Policy | CVE-2026-100217 | Windows Group Policy Elevation of Privilege Vulnerability | Important |
| Windows Health and Optimized Experiences Service | CVE-2026-96183 | Windows Health and Optimized Experiences Service Information Disclosure Vulnerability | Important |
| Windows Health and Optimized Experiences Service | CVE-2026-85884 | Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2026-83926 | Windows Hello Security Feature Bypass Vulnerability | Important |
| Windows Hello | CVE-2026-83790 | Windows Hello Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2026-83853 | Windows Hello Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2026-83907 | Windows Hello Information Disclosure Vulnerability | Important |
| Windows Hello | CVE-2026-83740 | Windows Hello Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2026-83849 | Windows Hello Information Disclosure Vulnerability | Important |
| Windows Hello | CVE-2026-70280 | Windows Hello Security Feature Bypass Vulnerability | Important |
| Windows Host Guardian Service | CVE-2026-96248 | Windows Host Guardian Service Denial of Service Vulnerability | Important |
| Windows Host Guardian Service | CVE-2026-87709 | Windows Host Guardian Service Tampering Vulnerability | Important |
| Windows Host Guardian Service | CVE-2026-88072 | Windows Host Guardian Service Elevation of Privilege Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-70247 | HTTP.sys Remote Code Execution Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-83705 | HTTP.sys Information Disclosure Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-83714 | HTTP.sys Information Disclosure Vulnerability | Important |
| Windows HTTP.sys | CVE-2026-70208 | HTTP.sys Information Disclosure Vulnerability | Important |
| Windows Hyper-V | CVE-2026-87705 | Windows Hyper-V Security Feature Bypass Vulnerability | Important |
| Windows Hyper-V | CVE-2026-97813 | Windows Hyper-V Information Disclosure Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83716 | Windows Hyper-V Remote Code Execution Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83766 | Windows Hyper-V Security Feature Bypass Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83931 | Windows Hyper-V Remote Code Execution Vulnerability | Important |
| Windows Hyper-V | CVE-2026-85369 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-102214 | Windows Hyper-V Remote Code Execution Vulnerability | Critical |
| Windows Hyper-V | CVE-2026-83728 | Windows Hyper-V Spoofing Vulnerability | Important |
| Windows Hyper-V | CVE-2026-88071 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83636 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83671 | Windows Hyper-V Information Disclosure Vulnerability | Important |
| Windows Hyper-V | CVE-2026-83839 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-96223 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-108399 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical |
| Windows Hyper-V | CVE-2026-105733 | Windows Hyper-V Remote Code Execution Vulnerability | Critical |
| Windows Hyper-V | CVE-2026-70248 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2026-70023 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2026-85343 | Windows Hyper-V Elevation of Privilege Vulnerability | Important |
| Windows IKE Extension | CVE-2026-83795 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important |
| Windows IKE Extension | CVE-2026-83685 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important |
| Windows IKE Extension | CVE-2026-103569 | Windows IKE Extension Information Disclosure Vulnerability | Important |
| Windows IKE Extension | CVE-2026-83521 | Windows IKE Extension Information Disclosure Vulnerability | Important |
| Windows IKE Extension | CVE-2026-83522 | Windows IKE Extension Spoofing Vulnerability | Important |
| Windows Image Acquisition | CVE-2026-85930 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important |
| Windows Image Acquisition | CVE-2026-83523 | Windows Image Acquisition Remote Code Execution Vulnerability | Important |
| Windows Image Acquisition | CVE-2026-85842 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important |
| Windows Imaging Component | CVE-2026-96859 | Windows Imaging Component Information Disclosure Vulnerability | Important |
| Windows Imaging Component | CVE-2026-77496 | Windows Imaging Component Remote Code Execution Vulnerability | Important |
| Windows Imaging Component | CVE-2026-69886 | Windows Imaging Component Remote Code Execution Vulnerability | Important |
| Windows Input System | CVE-2026-83763 | Windows Input System Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-88080 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83899 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87694 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87708 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87704 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-108468 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87715 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87711 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87700 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-69471 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-69635 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-70272 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83676 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83680 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83672 | Windows Installer Information Disclosure Vulnerability | Important |
| Windows Installer | CVE-2026-83708 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83775 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83752 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85358 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85796 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83779 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85361 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85830 | Windows Installer Information Disclosure Vulnerability | Important |
| Windows Installer | CVE-2026-85364 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83702 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-96307 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-96305 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-88124 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-96308 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-87693 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83718 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85941 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-83717 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85366 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-85374 | Windows Installer Information Disclosure Vulnerability | Important |
| Windows Installer | CVE-2026-83767 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-96302 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2026-88076 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Internal System User Profile | CVE-2026-96244 | Windows Internal System User Profile Elevation of Privilege Vulnerability | Important |
| Windows Internet (wininet.dll) | CVE-2026-83845 | Windows Internet (wininet.dll) Spoofing Vulnerability | Important |
| Windows Internet (wininet.dll) | CVE-2026-83865 | Windows Internet (wininet.dll) Tampering Vulnerability | Important |
| Windows Internet Connection Sharing (ICS) | CVE-2026-85856 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Important |
| Windows Internet Information Services | CVE-2026-70024 | Windows Internet Information Services Remote Code Execution Vulnerability | Important |
| Windows Internet Information Services | CVE-2026-78459 | Microsoft Internet Information Services Elevation of Privilege Vulnerability | Important |
| Windows Internet Information Services | CVE-2026-97830 | Windows Internet Information Services Denial of Service Vulnerability | Important |
| Windows Internet Key Exchange (IKE) Protocol | CVE-2026-83843 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important |
| Windows IP Over USB Service | CVE-2026-70008 | Windows IP Over USB Service Elevation of Privilege Vulnerability | Important |
| Windows IP Over USB Service | CVE-2026-70011 | Windows IP Over USB Service Information Disclosure Vulnerability | Important |
| Windows iSCSI | CVE-2026-69705 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-69644 | Windows iSCSI Information Disclosure Vulnerability | Important |
| Windows iSCSI | CVE-2026-70013 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-70095 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-69721 | Windows iSCSI Information Disclosure Vulnerability | Important |
| Windows iSCSI | CVE-2026-69883 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-69521 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-70031 | Windows iSCSI Denial of Service Vulnerability | Important |
| Windows iSCSI | CVE-2026-70038 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows iSCSI | CVE-2026-69634 | Windows iSCSI Remote Code Execution Vulnerability | Important |
| Windows Kerberos | CVE-2026-70064 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-83720 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-70241 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kerberos | CVE-2026-108132 | Windows Kerberos Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-96312 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-97803 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-85945 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-85939 | Windows Kernel Security Feature Bypass Vulnerability | Important |
| Windows Kernel | CVE-2026-102207 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-85850 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83675 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83768 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-85372 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-69898 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83882 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83796 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70106 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83833 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-103578 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70303 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-96317 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83924 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83925 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-85837 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70160 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70063 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-70170 | Windows Kernel Denial of Service Vulnerability | Important |
| Windows Kernel | CVE-2026-83736 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83735 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70114 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70111 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70077 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-70121 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70199 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-88139 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70243 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-85836 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-88134 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-88141 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-102187 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-83690 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-96216 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-70232 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-108462 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2026-96913 | Windows Kernel Elevation of Privilege Vulnerability | Critical |
| Windows Kernel | CVE-2026-83918 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-83913 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-96868 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-96929 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2026-108466 | Windows Kernel Denial of Service Vulnerability | Important |
| Windows Kernel Mode Driver | CVE-2026-83573 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important |
| Windows kernel32.dll | CVE-2026-68836 | Windows kernel32.dll Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-83834 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-85857 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-96915 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-83637 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-96849 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-83837 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-69971 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-83568 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-96247 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2026-85871 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | Important |
| Windows Key Distribution Center | CVE-2026-69650 | Windows Key Distribution Center Elevation of Privilege Vulnerability | Important |
| Windows Key Distribution Center | CVE-2026-69640 | Windows Key Distribution Center Security Feature Bypass Vulnerability | Important |
| Windows Key Storage Provider | CVE-2026-69506 | Windows Key Storage Provider Information Disclosure Vulnerability | Important |
| Windows Key Storage Provider | CVE-2026-88140 | Windows Key Storage Provider Information Disclosure Vulnerability | Important |
| Windows Libarchive | CVE-2026-69968 | Windows libarchive Tampering Vulnerability | Important |
| Windows Libarchive | CVE-2026-70062 | Windows libarchive Remote Code Execution Vulnerability | Important |
| Windows Libarchive | CVE-2026-69639 | Windows libarchive Remote Code Execution Vulnerability | Important |
| Windows Libarchive | CVE-2026-69973 | Windows libarchive Tampering Vulnerability | Important |
| Windows Libarchive | CVE-2026-69985 | Windows libarchive Remote Code Execution Vulnerability | Important |
| Windows Local Security Authority (LSA) | CVE-2026-88161 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-96219 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-83649 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-83516 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-70015 | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability | Important |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-83928 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-88091 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-83783 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-85362 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-83724 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-85852 | Windows Management Instrumentation Information Disclosure Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-96851 | Windows Management Instrumentation Information Disclosure Vulnerability | Important |
| Windows Management Instrumentation | CVE-2026-96856 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important |
| Windows Management Services | CVE-2026-87691 | Windows Management Services Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-83650 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-83641 | Windows Media Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2026-96071 | Windows Media Remote Code Execution Vulnerability | Important |
| Windows Media Player | CVE-2026-96096 | Windows Media Player Remote Code Execution Vulnerability | Important |
| Windows Media Video Decoder | CVE-2026-100220 | Windows Media Video Decoder Remote Code Execution Vulnerability | Critical |
| Windows Message Queuing | CVE-2026-108460 | Windows Message Queuing Remote Code Execution Vulnerability | Critical |
| Windows Message Queuing Queue Manager | CVE-2026-85334 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-85860 | Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-85874 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-85859 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | Important |
| Windows Message Queuing Queue Manager | CVE-2026-100202 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | Critical |
| Windows Message Queuing Queue Manager | CVE-2026-96921 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-83773 | Windows MIDI Service Module Information Disclosure Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-88079 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-83828 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows MIDI Service Module | CVE-2026-83751 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important |
| Windows Mobile Broadband | CVE-2026-97800 | Windows Mobile Broadband Elevation of Privilege Vulnerability | Important |
| Windows Mobile Device Management | CVE-2026-70216 | Windows Mobile Device Management Tampering Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-85833 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-83654 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-83697 | Windows Modern Device Management (MDM) Tampering Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-83656 | Windows Modern Device Management (MDM) Tampering Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-108133 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-108396 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-83657 | Windows Modern Device Management (MDM) Tampering Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-96850 | Windows Modern Device Management (MDM) Information Disclosure Vulnerability | Important |
| Windows Modern Device Management (MDM) | CVE-2026-96855 | Windows Modern Device Management (MDM) Tampering Vulnerability | Important |
| Windows NDIS | CVE-2026-105007 | Windows NDIS Elevation of Privilege Vulnerability | Important |
| Windows NetBIOS | CVE-2026-70054 | Windows NetBIOS Elevation of Privilege Vulnerability | Important |
| Windows Netlogon | CVE-2026-70025 | Windows Netlogon Denial of Service Vulnerability | Important |
| Windows Netlogon | CVE-2026-70090 | Windows Netlogon Information Disclosure Vulnerability | Important |
| Windows Netlogon | CVE-2026-70072 | Windows Netlogon Denial of Service Vulnerability | Important |
| Windows Network File System | CVE-2026-102186 | Windows Network File System Information Disclosure Vulnerability | Important |
| Windows Network File System | CVE-2026-69675 | Windows Network File System Information Disclosure Vulnerability | Important |
| Windows Network File System | CVE-2026-70143 | Windows Network File System Remote Code Execution Vulnerability | Important |
| Windows Network File System | CVE-2026-96209 | Windows Network File System Elevation of Privilege Vulnerability | Important |
| Windows Network List Service | CVE-2026-96311 | Windows Network List Service Tampering Vulnerability | Important |
| Windows Network Load Balancing | CVE-2026-83862 | Windows Network Load Balancing Remote Code Execution Vulnerability | Important |
| Windows Notification | CVE-2026-83854 | Windows Notification Information Disclosure Vulnerability | Important |
| Windows Now Playing Session Manager | CVE-2026-83701 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability | Important |
| Windows Now Playing Session Manager | CVE-2026-83700 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-70010 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-96217 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83508 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-96927 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-96925 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-96918 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-81971 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83737 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-70172 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83786 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-83706 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-96916 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83585 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-96867 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-83652 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83567 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83859 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83640 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-83712 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-96931 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-69916 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-83864 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTFS | CVE-2026-69915 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-96928 | Windows NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2026-69902 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2026-96935 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows NTLM | CVE-2026-83709 | Windows NTLM Elevation of Privilege Vulnerability | Important |
| Windows OLE | CVE-2026-96924 | Windows OLE Remote Code Execution Vulnerability | Important |
| Windows OLE | CVE-2026-70059 | Windows OLE Elevation of Privilege Vulnerability | Important |
| Windows OLE | CVE-2026-70138 | Windows OLE Elevation of Privilege Vulnerability | Important |
| Windows OLE DB | CVE-2026-70210 | Windows OLE DB Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-83749 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-105004 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-83879 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-83727 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69952 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69954 | Windows Overlay Filter Information Disclosure Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69958 | Windows Overlay Filter Remote Code Execution Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69950 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69959 | Windows Overlay Filter Remote Code Execution Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69967 | Windows Overlay Filter Information Disclosure Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69957 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-96315 | Windows Overlay Filter Tampering Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69942 | Windows Overlay Filter Remote Code Execution Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69947 | Windows Overlay Filter Remote Code Execution Vulnerability | Important |
| Windows Overlay Filter | CVE-2026-69953 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important |
| Windows Paint | CVE-2026-83844 | Windows Paint Remote Code Execution Vulnerability | Important |
| Windows Partition Management Driver | CVE-2026-97805 | Windows Partition Management Driver Remote Code Execution Vulnerability | Important |
| Windows Partition Management Driver | CVE-2026-83851 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important |
| Windows Partition Management Driver | CVE-2026-103553 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important |
| Windows Partition Management Driver | CVE-2026-83514 | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important |
| Windows Partition Management Driver | CVE-2026-83797 | Windows Partition Management Driver Remote Code Execution Vulnerability | Important |
| Windows PCI Bus Driver | CVE-2026-96917 | Windows PCI Bus Driver Elevation of Privilege Vulnerability | Important |
| Windows PCI Bus Driver | CVE-2026-85915 | Windows PCI Bus Driver Elevation of Privilege Vulnerability | Important |
| Windows Perception Simulation Service | CVE-2026-61931 | Windows Perception Simulation Service Elevation of Privilege Vulnerability | Important |
| Windows Performance Monitor | CVE-2026-85359 | Windows Performance Monitor Elevation of Privilege Vulnerability | Important |
| Windows Performance Monitor | CVE-2026-85333 | Windows Performance Monitor Elevation of Privilege Vulnerability | Important |
| Windows Phone Service | CVE-2026-85357 | Windows Phone Service Elevation of Privilege Vulnerability | Important |
| Windows Portable Device Enumerator Service | CVE-2026-88133 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability | Important |
| Windows Portable Device File System Driver | CVE-2026-70132 | Windows Portable Device File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Portable Device File System Driver | CVE-2026-83664 | Windows Portable Device File System Driver Information Disclosure Vulnerability | Important |
| Windows Portable Device MTP Driver | CVE-2026-83794 | Windows Portable Device MTP Driver Information Disclosure Vulnerability | Important |
| Windows Portable Device MTP Driver | CVE-2026-102206 | Windows Portable Device MTP Driver Elevation of Privilege Vulnerability | Important |
| Windows PowerShell | CVE-2026-85805 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important |
| Windows PowerShell | CVE-2026-83578 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| Windows PowerShell | CVE-2026-70052 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| Windows PowerShell | CVE-2026-85817 | Microsoft PowerShell Remote Code Execution Vulnerability | Important |
| Windows PowerShell | CVE-2026-70185 | Microsoft PowerShell Security Feature Bypass Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85327 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85353 | Windows Print Spooler Components Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-83733 | Windows Print Spooler Components Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85376 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85847 | Windows Print Spooler Components Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-84018 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85933 | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2026-85320 | Windows Print Spooler Components Information Disclosure Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-83781 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-69596 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-69743 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-72969 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-96920 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-72934 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Program Compatibility Assistant Service | CVE-2026-72968 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important |
| Windows Projected File System | CVE-2026-70084 | Windows Projected File System Information Disclosure Vulnerability | Important |
| Windows Projected File System | CVE-2026-84009 | Windows Projected File System Tampering Vulnerability | Important |
| Windows Projected File System | CVE-2026-96857 | Windows Projected File System Information Disclosure Vulnerability | Important |
| Windows Projected File System | CVE-2026-85328 | Windows Projected File System Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-70198 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-96313 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Push Notifications | CVE-2026-83867 | Windows Push Notifications Elevation of Privilege Vulnerability | Important |
| Windows Quality of Service (QoS) Packet Scheduler | CVE-2026-87712 | Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability | Important |
| Windows Raw Image Extension | CVE-2026-96943 | Windows Raw Image Extension Remote Code Execution Vulnerability | Critical |
| Windows Raw Image Extension | CVE-2026-96202 | Windows Raw Image Extension Remote Code Execution Vulnerability | Critical |
| Windows Raw Image Extension | CVE-2026-21413 | Raw Image Extension Remote Code Execution Vulnerability | Critical |
| Windows Registry | CVE-2026-83927 | Windows Registry Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2026-85867 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2026-70137 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | Important |
| Windows Remote Access Service Infrastructure | CVE-2026-87698 | Windows Remote Access Service Infrastructure Information Disclosure Vulnerability | Important |
| Windows Remote Desktop | CVE-2026-59116 | Windows Remote Desktop Security Feature Bypass Vulnerability | Important |
| Windows Remote Desktop Protocol | CVE-2026-83861 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Protocol | CVE-2026-102198 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | Important |
| Windows Remote Desktop Protocol | CVE-2026-96322 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability | Important |
| Windows Remote Desktop Services | CVE-2026-69992 | Remote Desktop Services Remote Code Execution Vulnerability | Important |
| Windows Remote POS Driver | CVE-2026-70135 | Windows Remote POS Driver Information Disclosure Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-102227 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-70048 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important |
| Windows Resilient File System (ReFS) | CVE-2026-70116 | Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability | Important |
| Windows Resilient File System (ReFS) | ADV260001 | ADV260001 Hardening changes for ReFS volumes on removable media | None |
| Windows Resilient File System (ReFS) Deduplication Service | CVE-2026-83586 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Important |
| Windows Resource Management (MRM) | CVE-2026-87702 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability | Important |
| Windows Resume | CVE-2026-96318 | Windows Resume Elevation of Privilege Vulnerability | Important |
| Windows Rich Text Edit Control | CVE-2026-70096 | Windows Rich Text Edit Control Remote Code Execution Vulnerability | Important |
| Windows Rich Text Edit Control | CVE-2026-70093 | Windows Rich Text Edit Control Elevation of Privilege Vulnerability | Important |
| Windows RNDIS | CVE-2026-83788 | Windows rndismp6.sys Information Disclosure Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-70057 | Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85794 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-84020 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85339 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85808 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85809 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-70158 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-96245 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-103558 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-96316 | Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85322 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-85792 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important |
| Windows Routing and Remote Access Service (RRAS) | CVE-2026-84017 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Important |
| Windows Schannel | CVE-2026-85818 | Windows Schannel Spoofing Vulnerability | Important |
| Windows Schannel | CVE-2026-70566 | Windows Schannel Elevation of Privilege Vulnerability | Important |
| Windows Schannel | CVE-2026-105005 | Windows Schannel Remote Code Execution Vulnerability | Important |
| Windows Schannel | CVE-2026-105008 | Windows Schannel Spoofing Vulnerability | Important |
| Windows Secure Boot | CVE-2026-102221 | Secure Boot Security Feature Bypass Vulnerability | Important |
| Windows Secure Kernel Mode | CVE-2026-70017 | Windows Secure Kernel Mode Information Disclosure Vulnerability | Important |
| Windows Secure Kernel Mode | CVE-2026-70026 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Important |
| Windows Secure Kernel Mode | CVE-2026-96865 | Windows Secure Kernel Mode Information Disclosure Vulnerability | Important |
| Windows Secure Socket Tunneling Protocol (SSTP) | CVE-2026-88147 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | Important |
| Windows Secure Socket Tunneling Protocol (SSTP) | CVE-2026-85926 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Important |
| Windows Security Account Manager | CVE-2026-96858 | Windows Security Account Manager Tampering Vulnerability | Important |
| Windows Security App | CVE-2026-105725 | Windows Security App Elevation of Privilege Vulnerability | Important |
| Windows Security Center | CVE-2026-71347 | Windows Security Center Elevation of Privilege Vulnerability | Important |
| Windows Security Center | CVE-2026-70212 | Windows Security Center Elevation of Privilege Vulnerability | Important |
| Windows Security Support Provider Interface | CVE-2026-88098 | Windows Security Support Provider Interface Elevation of Privilege Vulnerability | Important |
| Windows Sensor Data Service | CVE-2026-83639 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important |
| Windows Server for NFS | CVE-2026-88115 | Windows Server for NFS Remote Code Execution Vulnerability | Important |
| Windows Server Update Service | CVE-2026-83499 | Windows Server Update Service Elevation of Privilege Vulnerability | Important |
| Windows Server Update Service | CVE-2026-105009 | Windows Server Update Service Elevation of Privilege Vulnerability | Important |
| Windows Server Update Service | CVE-2026-81969 | Windows Server Update Service Elevation of Privilege Vulnerability | Important |
| Windows Setup and Deployment | CVE-2026-97793 | Windows Setup and Deployment Elevation of Privilege Vulnerability | Important |
| Windows Setup Files Cleanup | CVE-2026-83509 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important |
| Windows Setup Files Cleanup | CVE-2026-83505 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important |
| Windows Setup Files Cleanup | CVE-2026-83510 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important |
| Windows Setup Files Cleanup | CVE-2026-73027 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2026-83906 | Windows Shell Spoofing Vulnerability | Important |
| Windows Shell | CVE-2026-83876 | Windows Shell Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2026-83782 | Windows Shell Remote Code Execution Vulnerability | Important |
| Windows Shell | CVE-2026-83873 | Windows Shell Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2026-83905 | Windows Shell Information Disclosure Vulnerability | Important |
| Windows Shell | CVE-2026-85936 | Windows Shell Remote Code Execution Vulnerability | Important |
| Windows Shell | CVE-2026-70222 | Windows Shell Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2026-96951 | Windows Shell Security Feature Bypass Vulnerability | Important |
| Windows Smart Card | CVE-2026-83579 | Windows Smart Card Elevation of Privilege Vulnerability | Important |
| Windows Smart Card | CVE-2026-83584 | Windows Smart Card Elevation of Privilege Vulnerability | Important |
| Windows SmartScreen | CVE-2026-85851 | Windows SmartScreen Elevation of Privilege Vulnerability | Important |
| Windows SmartScreen | CVE-2026-83504 | Windows SmartScreen Information Disclosure Vulnerability | Important |
| Windows SmartScreen | CVE-2026-108463 | Windows SmartScreen Security Feature Bypass Vulnerability | Important |
| Windows SmartScreen | CVE-2026-62879 | Windows SmartScreen Tampering Vulnerability | Important |
| Windows SmartScreen | CVE-2026-70051 | Windows SmartScreen Elevation of Privilege Vulnerability | Important |
| Windows SMB Client | CVE-2026-84011 | Windows SMB Client Security Feature Bypass Vulnerability | Important |
| Windows SMB Client | CVE-2026-83789 | Windows SMB Client Elevation of Privilege Vulnerability | Important |
| Windows SMB Server | CVE-2026-70133 | Windows SMB Server Denial of Service Vulnerability | Important |
| Windows SMB Server | CVE-2026-96325 | Windows SMB Server Denial of Service Vulnerability | Important |
| Windows SMB Server | CVE-2026-88127 | Windows SMB Server Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-83832 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-70102 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-69934 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-96862 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important |
| Windows Spaceport.sys | CVE-2026-70112 | Windows Spaceport.sys Remote Code Execution Vulnerability | Important |
| Windows StateRepository API | CVE-2026-85910 | Windows StateRepository API Information Disclosure Vulnerability | Important |
| Windows StateRepository API | CVE-2026-85911 | Windows StateRepository API Elevation of Privilege Vulnerability | Important |
| Windows StateRepository API | CVE-2026-70218 | Windows StateRepository API Elevation of Privilege Vulnerability | Important |
| Windows StateRepository API | CVE-2026-102216 | Windows StateRepository API Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-69935 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-102191 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-83911 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-69763 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-69766 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-96944 | Windows Storage Information Disclosure Vulnerability | Important |
| Windows Storage | CVE-2026-100216 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-100225 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-69931 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-69856 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage | CVE-2026-102189 | Windows Storage Elevation of Privilege Vulnerability | Important |
| Windows Storage Port Driver | CVE-2026-88226 | Windows Storage Port Driver Information Disclosure Vulnerability | Important |
| Windows Storage Port Driver | CVE-2026-96863 | Windows Storage Port Driver Elevation of Privilege Vulnerability | Important |
| Windows Storage Port Driver | CVE-2026-102188 | Windows Storage Port Driver Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2026-70238 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2026-88143 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2026-87706 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2026-87716 | Windows Storage Spaces Controller Denial of Service Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2026-88100 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important |
| Windows Storage VSP Driver | CVE-2026-85872 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | Important |
| Windows Storport Miniport Driver | CVE-2026-69765 | Windows Storport Miniport Driver Remote Code Execution Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-70027 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-96309 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-96206 | Windows Subsystem for Linux Information Disclosure Vulnerability | Important |
| Windows Subsystem for Linux | CVE-2026-85879 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | Important |
| Windows Sysmain Service | CVE-2026-85793 | Windows Sysmain Service Information Disclosure Vulnerability | Important |
| Windows Sysmain Service | CVE-2026-96306 | Windows Sysmain Service Elevation of Privilege Vulnerability | Important |
| Windows System Information Console | CVE-2026-70157 | Windows System Information Console Remote Code Execution Vulnerability | Important |
| Windows TCP/IP | CVE-2026-70164 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-96852 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-83872 | Windows TCP/IP Local Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-85834 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-83682 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-83678 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-85368 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-83842 | Windows TCP/IP Elevation of Privilege Vulnerability | Important |
| Windows TCP/IP | CVE-2026-69913 | Windows TCP/IP Remote Code Execution Vulnerability | Important |
| Windows Telephony Server | CVE-2026-84013 | Windows Telephony Server Elevation of Privilege Vulnerability | Important |
| Windows Telephony Server | CVE-2026-85810 | Windows Telephony Server Elevation of Privilege Vulnerability | Important |
| Windows Text Services Framework | CVE-2026-85795 | Windows Text Services Framework Elevation of Privilege Vulnerability | Important |
| Windows Text Shaping | CVE-2026-97814 | Windows Text Shaping Remote Code Execution Vulnerability | Critical |
| Windows Text Shaping | CVE-2026-102210 | Windows Text Shaping Remote Code Execution Vulnerability | Important |
| Windows Text Shaping | CVE-2026-102225 | Windows Text Shaping Remote Code Execution Vulnerability | Critical |
| Windows Text Shaping | CVE-2026-83770 | Windows Text Shaping Remote Code Execution Vulnerability | Important |
| Windows UEFI | CVE-2026-49785 | UEFI Secure Boot Security Feature Bypass Vulnerability | Important |
| Windows UI Immersive Server | CVE-2026-85905 | Windows UI Immersive Server API Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96950 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-83513 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96953 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-83713 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96930 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-102215 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-83857 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-102218 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-102205 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96949 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-85821 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96947 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-85820 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-96946 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-85909 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | Important |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-85825 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important |
| Windows Universal Plug and Play (UPnP) Device Host | CVE-2026-85375 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important |
| Windows Universal Plug and Play (UPnP) Device Host | CVE-2026-85918 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important |
| Windows Universal Plug and Play (UPnP) Device Host | CVE-2026-85927 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important |
| Windows Universal Plug and Play (UPnP) Device Host | CVE-2026-85373 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69999 | Windows Update Information Disclosure Vulnerability | Important |
| Windows Update | CVE-2026-69718 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69733 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69633 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-96323 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69673 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69882 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update | CVE-2026-69783 | Windows Update Elevation of Privilege Vulnerability | Important |
| Windows Update Delivery Optimization | CVE-2026-108465 | Windows Update Delivery Optimization Elevation of Privilege Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-83933 | Windows Update Orchestrator Service Information Disclosure Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-83507 | Windows Update Orchestrator Service Information Disclosure Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-83930 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-83793 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-81964 | Windows Update Orchestrator Service Security Feature Bypass Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-97812 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important |
| Windows Update Orchestrator Service | CVE-2026-83886 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important |
| Windows Update Service | CVE-2026-70139 | Windows Update Service Elevation of Privilege Vulnerability | Important |
| Windows Update Service | CVE-2026-70142 | Windows Update Service Elevation of Privilege Vulnerability | Important |
| Windows Update Service | CVE-2026-100203 | Windows Update Service Elevation of Privilege Vulnerability | Important |
| Windows Update Service | CVE-2026-100200 | Windows Update Service Elevation of Privilege Vulnerability | Important |
| Windows Update Service | CVE-2026-70056 | Windows Update Service Elevation of Privilege Vulnerability | Important |
| Windows Update Stack | CVE-2026-83798 | Windows Update Stack Spoofing Vulnerability | Important |
| Windows Update Stack | CVE-2026-96218 | Windows Update Stack Tampering Vulnerability | Important |
| Windows USB Driver | CVE-2026-85935 | Windows USB Driver Information Disclosure Vulnerability | Important |
| Windows USB Driver | CVE-2026-83638 | Windows USB Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Driver | CVE-2026-83588 | Windows USB Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96253 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96301 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96254 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96304 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96250 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96319 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96310 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Print Driver | CVE-2026-96860 | Windows USB Print Driver Information Disclosure Vulnerability | Important |
| Windows USB Video Driver | CVE-2026-85807 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important |
| Windows USB Video Driver | CVE-2026-85341 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important |
| Windows User Profile Service | CVE-2026-83659 | Windows User Profile Service Elevation of Privilege Vulnerability | Important |
| Windows VHD miniport driver | CVE-2026-102220 | Windows VHD miniport driver Elevation of Privilege Vulnerability | Important |
| Windows Virtual Input | CVE-2026-83791 | Windows Virtual Input Elevation of Privilege Vulnerability | Important |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-70075 | Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability | Important |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-108471 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-70097 | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability | Important |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-88074 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-96914 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-102211 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-83885 | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability | Important |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-108130 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical |
| Windows VMSwitch | CVE-2026-69978 | Microsoft Windows VMSwitch Denial of Service Vulnerability | Important |
| Windows Volume Manager Extension Driver | CVE-2026-85928 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Important |
| Windows Volume Manager Extension Driver | CVE-2026-85356 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important |
| Windows Volume Manager Extension Driver | CVE-2026-83694 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important |
| Windows WalletService | CVE-2026-96243 | Windows WalletService Elevation of Privilege Vulnerability | Important |
| Windows Web Account Manager | CVE-2026-85846 | Web Account Manager Elevation of Privilege Vulnerability | Important |
| Windows Wi-Fi Driver | CVE-2026-83703 | Windows Wi-Fi Driver Denial of Service Vulnerability | Important |
| Windows Wi-Fi Driver | CVE-2026-85816 | Windows Wi-Fi Driver Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70271 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-96249 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70104 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83897 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83895 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70060 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70253 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70211 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-85802 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70236 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-85858 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83774 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70209 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70273 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83761 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-85804 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83901 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83909 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70176 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70144 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70292 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70067 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-96853 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70249 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70293 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70117 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70285 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-96848 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70288 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70294 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70108 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-83756 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-102208 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70076 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70284 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32 Kernel Subsystem | CVE-2026-70295 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K | CVE-2026-83866 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83721 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83732 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83841 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83762 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83883 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83757 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Win32K | CVE-2026-83755 | Win32k Information Disclosure Vulnerability | Important |
| Windows Win32K – GRFX | CVE-2026-70286 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Windows Win32K – GRFX | CVE-2026-85908 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Windows Win32K – GRFX | CVE-2026-85901 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Windows Win32K – ICOMP | CVE-2026-83566 | Windows Win32k Elevation of Privilege Vulnerability | Important |
| Windows Wired AutoConfig Service | CVE-2026-85829 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability | Important |
| Windows Wired AutoConfig Service | CVE-2026-69798 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability | Important |
| Windows WLAN Service | CVE-2026-83668 | Windows WLAN Service Information Disclosure Vulnerability | Important |
| Windows WLAN Service | CVE-2026-83855 | Windows WLAN Service Denial of Service Vulnerability | Important |
| Windows Work Folders | CVE-2026-70045 | Windows Work Folders Elevation of Privilege Vulnerability | Important |
| Windows Workstation Service | CVE-2026-96923 | Windows Workstation Service Elevation of Privilege Vulnerability | Important |
| Winlogon | CVE-2026-87699 | Winlogon Elevation of Privilege Vulnerability | Important |
