https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 11 Aug 2026 20:26:05 +0000 https://vulnerability.circl.lu/sighting/dd3d8b0d-acc1-4546-9e1c-d74b7ff23dc8/export {"uuid": "dd3d8b0d-acc1-4546-9e1c-d74b7ff23dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\nAdobe Patches for August 2026\n\n\n\n \nAdobe Patches for August 2026\n \n\n \n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n \n \n \n APSB26-90\n Adobe ColdFusion\n 15\n Critical\n 10.0\n No\n 1\n \n \n APSB26-123\n Adobe Campaign Classic\n 3\n Critical\n 10.0\n No\n 1\n \n \n APSB26-92\n Adobe Commerce\n 7\n Critical\n 9.1\n No\n 2\n \n \n APSB26-94\n Adobe Lightroom Classic\n 11\n Critical\n 8.6\n No\n 3\n \n \n APSB26-111\n Content Credentials SDK\n 15\n Critical\n 7.5\n No\n 3\n \n \n TOTAL\n 5 bulletins\n 51\n \n \n \n \n \n \n \n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-68820\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n Yes\n EoP\n \n \n CVE-2026-62832\n Windows User Profile\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n Yes\n No\n EoP\n \n \n CVE-2026-49163 **\n Application Insights\n Profiler Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50481 **\n Azure Active Directory\n Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-68823 **\n Azure Confidential\n Ledger Remote Code Execution Vulnerability\n Critical\n 9.1\n No\n No\n RCE\n \n \n CVE-2026-62869 **\n Azure Entra ID\n Spoofing Vulnerability\n Critical\n 8.8\n No\n No\n Spoofing\n \n \n CVE-2026-56161 **\n Azure Logic Apps\n Information Disclosure Vulnerability\n Critical\n 9.6\n No\n No\n Info\n \n \n CVE-2026-50515 **\n Azure Service Bus\n Remote Code Execution Vulnerability\n Critical\n 9.9\n No\n No\n RCE\n \n \n CVE-2026-56162 **\n Azure SQL Database\n Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-63522 **\n Azure SQL Database\n Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62836 **\n Azure SQL Managed\n Instance Elevation of Privilege Vulnerability\n Critical\n 8.7\n No\n No\n EoP\n \n \n CVE-2026-62830 **\n Azure SRE Agent\n Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-62873 **\n Microsoft 365 Admin\n Center Elevation of Privilege Vulnerability\n Critical\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-50516 **\n Microsoft Azure\n Kubernetes Service Elevation of Privilege Vulnerability\n Critical\n 9.4\n No\n No\n EoP\n \n \n CVE-2026-59115 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-68794\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68804\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68816\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62911\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Critical\n 8\n No\n No\n EoP\n \n \n CVE-2026-63513\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63519\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63526\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65664\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-66807\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63515\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63532\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64898\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64903\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64909\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64910\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64911\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65657\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70130\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-70332 **\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-63518\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63525\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64907\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63508 **\n Microsoft Planetary\n Computer Pro Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-59118 **\n Microsoft Power Apps\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-65668 **\n Microsoft Purview\n eDiscovery Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-62815\n Microsoft QUIC Remote\n Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-62827\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-64921\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-65665\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62896 **\n Microsoft Teams\n Elevation of Privilege Vulnerability\n Critical\n 9.6\n No\n No\n EoP\n \n \n CVE-2026-65667 **\n Microsoft Teams\n Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-62918 **\n Microsoft Teams\n Spoofing Vulnerability\n Critical\n 7.5\n No\n No\n Spoofing\n \n \n CVE-2026-62824\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62818\n Windows Active\n Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62893\n Windows Deployment\n Services TFTP Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-66802\n Windows Device Health\n Attestation (DHA) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-71331\n Windows Device Health\n Attestation (DHA) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62823\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62817\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62820\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62878\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-65789\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62890\n Windows GDI+ Elevation\n of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62822\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65791\n Windows iSCSI Target\n Service Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-66799\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62816\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62819\n Windows Routing and\n Remote Access Service (RRAS) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62889\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-70354\n .NET Core Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62901\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58641\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62871\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62886\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62909\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62872\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-65810\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62897\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7\n No\n No\n RCE\n \n \n CVE-2026-62900\n .NET Information\n Disclosure Vulnerability\n Important\n 5.9\n No\n No\n Info\n \n \n CVE-2026-62902\n .NET Information\n Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62899\n .NET Security Feature\n Bypass Vulnerability\n Important\n 5.9\n No\n No\n SFB\n \n \n CVE-2026-65777\n Active Directory\n Security Feature Bypass Vulnerability\n Important\n 5.3\n No\n No\n SFB\n \n \n CVE-2026-59130\n AMD Zen Information\n Disclosure Vulnerability\n Important\n 5.6\n No\n No\n Info\n \n \n CVE-2026-59131\n AMD Zen Information\n Disclosure Vulnerability\n Important\n 5.6\n No\n No\n Info\n \n \n CVE-2026-62898\n Microsoft QUIC Information Disclosure\n Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-61357\n Application\n Information Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70340\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-65806\n Azure CycleCloud\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-47299\n Azure Monitor Agent\n Elevation of Privilege Vulnerability\n Important\n 7.2\n No\n No\n EoP\n \n \n CVE-2026-57104\n Azure Storage Explorer\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-62892\n Capability Access\n Management Service (camsvc) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65675\n CoPilot Chat Security\n Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-65786\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65787\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65788\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-70335\n GitHub Copilot and\n Visual Studio Code Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-64906\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64908\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64912\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64914\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64919\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64920\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-59136\n Microsoft COM for\n Windows Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54123\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62698\n Microsoft Digest\n Authentication Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-66301\n Microsoft Dynamics 365\n (On-Premises) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65815\n Microsoft Dynamics 365\n On-Premises Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-40375\n Microsoft Dynamics\n Business Central Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65673\n Microsoft Entra\n Connect Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-68797\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68799\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68802\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68808\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68813\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70318\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70327\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-70328\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65807\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68793\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68795\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68796\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68798\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68800\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68801\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68803\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68805\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68806\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68807\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68810\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68811\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68812\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68814\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68815\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68817\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62912\n Microsoft Exchange\n Server Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-62910\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.2\n No\n No\n EoP\n \n \n CVE-2026-65813\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-62913\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62915\n Microsoft Exchange\n Server Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-62914\n Microsoft Exchange\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-59133\n Microsoft High\n Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-59124\n Microsoft High\n Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-62784\n Microsoft Local\n Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68792\n Microsoft Office\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62842\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63517\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66809\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63524\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63529\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-64899\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70314\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70315\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70317\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70323\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63533\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64904\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65656\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65661\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57105\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-70306\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Important\n 9.3\n No\n No\n Spoofing\n \n \n CVE-2026-63521\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63528\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63530\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63531\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-64917\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66806\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66810\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70319\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63527\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64905\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64915\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70311\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65680\n Microsoft OneDrive for\n MacOS Elevation of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70329\n Microsoft Outlook\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62882\n Microsoft Outlook\n Spoofing Vulnerability\n Important\n 4.3\n No\n No\n Spoofing\n \n \n CVE-2026-70313\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70337\n Microsoft PowerShell\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70338\n Microsoft PowerShell\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-59138\n Microsoft Remote\n Registry Service Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-61345\n Microsoft Remote\n Registry Service Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-70324\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-70321\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70326\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-70355\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-62837\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-63514\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-63520\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-64901\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65658\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65663\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66805\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66808\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58639\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-62829\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-62839\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-62917\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-63516\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-64897\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64900\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64902\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64916\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64922\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-65660\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-63512\n Microsoft SharePoint\n Server Tampering Vulnerability\n Important\n 6.5\n No\n No\n Tampering\n \n \n CVE-2026-65767\n Microsoft Teams for\n Android and iOS Spoofing Vulnerability\n Important\n 8.8\n No\n No\n Spoofing\n \n \n CVE-2026-65769\n Microsoft Teams iOS\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65768\n Microsoft Teams Remote\n Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66804\n Microsoft Windows\n Cross Device Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59135\n Microsoft Windows\n Search Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65814\n Microsoft Windows\n Storage Port Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70310\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58651\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-6726 *\n MITRE: CVE-2026-6726\n TPM 2.0 Improper Object Slot Reuse\n Important\n 7.9\n No\n No\n \n \n \n CVE-2026-6727 *\n MITRE: CVE-2026-6727\n TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n Important\n 5.9\n No\n No\n \n \n \n CVE-2026-65811\n Power BI Remote Code\n Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68809\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70312\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70316\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70320\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70322\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70325\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59119\n PowerShell Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-58612\n PowerShell Information\n Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-65671\n Remote Access API\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65672\n Remote Access API\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-42976\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59134\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61352\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61363\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-54113\n Remote Procedure Call\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-62781\n RPC Runtime Library\n Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-59125\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-47285\n Visual Studio Code\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54981\n Visual Studio Code\n Python Extension Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-59113\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-69320\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70336\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58650\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-69278\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-69306\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-62743\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62746\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62786\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62798\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61358\n Windows Accessibility\n Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49179\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-61348\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-70307\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65778\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65779\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65780\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65781\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65782\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65783\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62908\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61927\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61934\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62705\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62722\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62713\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62771\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62728\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62772\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62775\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-72971\n Windows Container Isolation FS Filter Driver\n (unionfs.sys) Tampering Vulnerability\n Important\n 5.5\n No\n No\n Tampering\n \n \n CVE-2026-61936\n Windows Defender\n Firewall Service Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-62710\n Windows Device\n Association Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62747\n Windows Device\n Association Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65785\n Windows DHCP Client\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-62736\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62755\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61361\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Important\n 7\n No\n No\n RCE\n \n \n CVE-2026-62761\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62776\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62803\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62807\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62812\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62714\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62715\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62716\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62718\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62720\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62742\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62745\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62814\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61923\n Windows Display\n Enhancement Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62769\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-62778\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-62881\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-62883\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65795\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65797\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65798\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65799\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70304\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70330\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-61920\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.6\n No\n No\n RCE\n \n \n CVE-2026-62787\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61932\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62888\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62894\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61933\n Windows DWM Core\n Library Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62703\n Windows DWM Core\n Library Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59128\n Windows Encrypting\n File System (EFS) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59126\n Windows Event Logging\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-59137\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61347\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61360\n Windows GDI\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65662\n Windows GDI\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62709\n Windows GDI+\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62702\n Windows Graphics\n Kernel Denial of Service Vulnerability\n Important\n 6.8\n No\n No\n DoS\n \n \n CVE-2026-61346\n Windows Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62774\n Windows Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61928\n Windows Hello\n Tampering Vulnerability\n Important\n 5.5\n No\n No\n Tampering\n \n \n CVE-2026-62750\n Windows HTTP Protocol\n Stack Tampering Vulnerability\n Important\n 6.5\n No\n No\n Tampering\n \n \n CVE-2026-61937\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62735\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62739\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62741\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62753\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62811\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61368\n Windows Hyper-V\n Information Disclosure Vulnerability\n Important\n 5\n No\n No\n Info\n \n \n CVE-2026-62740\n Windows Imaging\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54984\n Windows Imaging\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-59127\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61925\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61938\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62768\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65774\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70344\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70345\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70346\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70347\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65681\n Windows iSCSI Target\n Service Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-65796\n Windows iSCSI Target\n Service Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-65679\n Windows iSCSI Target\n Service Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62752\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62754\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62766\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62773\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61929\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61930\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62708\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-62737\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62749\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62780\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62788\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65773\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62785\n Windows LDAP -\n Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62795\n Windows LDAP -\n Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62777\n Windows License\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50472\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62738\n Windows Management\n Instrumentation Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70348\n Windows Management\n Services Denial of Service Vulnerability\n Important\n 5.5\n No\n No\n DoS\n \n \n CVE-2026-62717\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62719\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65790\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62688\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62693\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62707\n Windows Modern Device\n Management (MDM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56174\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61366\n Windows Network\n Connection Broker Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-68819\n Windows Network File\n System Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-62700\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62797\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62880\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61350\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-62793\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62796\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62887\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65784\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68821\n Windows Package\n Manager Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-62696\n Windows Program\n Compatibility Assistant Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62751\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62690\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62758\n Windows Remote Access\n Connection Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62783\n Windows Remote Access\n Connection Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61918\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61921\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61924\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61356\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61364\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61365\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61367\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62692\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62779\n Windows Schannel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62757\n Windows Schannel\n Security Feature Bypass Vulnerability\n Important\n 5.3\n No\n No\n SFB\n \n \n CVE-2026-61355\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62770\n Windows Shell\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62799\n Windows SMB Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62782\n Windows SMB Client\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65794\n Windows SMB Client\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62790\n Windows SMBv3 Server\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62800\n Windows SMBv3 Server\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-61359\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62695\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59132\n Windows TCP/IP Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-62792\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-59122\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61353\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62701\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62723\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62724\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62725\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62726\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62729\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62732\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62734\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62748\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62699\n Windows Universal Disk\n Format File System Driver (UDFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-61926\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62721\n Windows User-Mode\n Power Service (UMPS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62711\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62712\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62733\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62876\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62877\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62885\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65678\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65775\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65776\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62730\n Windows Wired\n AutoConfig Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61349\n Windows Work Folder\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61939\n Winlogon Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56179\n Windows\n Network Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:41.176686Z"} {"uuid": "dd3d8b0d-acc1-4546-9e1c-d74b7ff23dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\nAdobe Patches for August 2026\n\n\n\n \nAdobe Patches for August 2026\n \n\n \n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n \n \n \n APSB26-90\n Adobe ColdFusion\n 15\n Critical\n 10.0\n No\n 1\n \n \n APSB26-123\n Adobe Campaign Classic\n 3\n Critical\n 10.0\n No\n 1\n \n \n APSB26-92\n Adobe Commerce\n 7\n Critical\n 9.1\n No\n 2\n \n \n APSB26-94\n Adobe Lightroom Classic\n 11\n Critical\n 8.6\n No\n 3\n \n \n APSB26-111\n Content Credentials SDK\n 15\n Critical\n 7.5\n No\n 3\n \n \n TOTAL\n 5 bulletins\n 51\n \n \n \n \n \n \n \n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-68820\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n Yes\n EoP\n \n \n CVE-2026-62832\n Windows User Profile\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n Yes\n No\n EoP\n \n \n CVE-2026-49163 **\n Application Insights\n Profiler Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50481 **\n Azure Active Directory\n Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-68823 **\n Azure Confidential\n Ledger Remote Code Execution Vulnerability\n Critical\n 9.1\n No\n No\n RCE\n \n \n CVE-2026-62869 **\n Azure Entra ID\n Spoofing Vulnerability\n Critical\n 8.8\n No\n No\n Spoofing\n \n \n CVE-2026-56161 **\n Azure Logic Apps\n Information Disclosure Vulnerability\n Critical\n 9.6\n No\n No\n Info\n \n \n CVE-2026-50515 **\n Azure Service Bus\n Remote Code Execution Vulnerability\n Critical\n 9.9\n No\n No\n RCE\n \n \n CVE-2026-56162 **\n Azure SQL Database\n Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-63522 **\n Azure SQL Database\n Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62836 **\n Azure SQL Managed\n Instance Elevation of Privilege Vulnerability\n Critical\n 8.7\n No\n No\n EoP\n \n \n CVE-2026-62830 **\n Azure SRE Agent\n Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-62873 **\n Microsoft 365 Admin\n Center Elevation of Privilege Vulnerability\n Critical\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-50516 **\n Microsoft Azure\n Kubernetes Service Elevation of Privilege Vulnerability\n Critical\n 9.4\n No\n No\n EoP\n \n \n CVE-2026-59115 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-68794\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68804\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68816\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62911\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Critical\n 8\n No\n No\n EoP\n \n \n CVE-2026-63513\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63519\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63526\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65664\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-66807\n Microsoft Office\n Graphics Component Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63515\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63532\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64898\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64903\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64909\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64910\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64911\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65657\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70130\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-70332 **\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-63518\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63525\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64907\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-63508 **\n Microsoft Planetary\n Computer Pro Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-59118 **\n Microsoft Power Apps\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-65668 **\n Microsoft Purview\n eDiscovery Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-62815\n Microsoft QUIC Remote\n Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-62827\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-64921\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-65665\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62896 **\n Microsoft Teams\n Elevation of Privilege Vulnerability\n Critical\n 9.6\n No\n No\n EoP\n \n \n CVE-2026-65667 **\n Microsoft Teams\n Elevation of Privilege Vulnerability\n Critical\n 10\n No\n No\n EoP\n \n \n CVE-2026-62918 **\n Microsoft Teams\n Spoofing Vulnerability\n Critical\n 7.5\n No\n No\n Spoofing\n \n \n CVE-2026-62824\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62818\n Windows Active\n Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62893\n Windows Deployment\n Services TFTP Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-66802\n Windows Device Health\n Attestation (DHA) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-71331\n Windows Device Health\n Attestation (DHA) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62823\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62817\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62820\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62878\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-65789\n Windows DNS Server\n Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62890\n Windows GDI+ Elevation\n of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62822\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65791\n Windows iSCSI Target\n Service Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-66799\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62816\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62819\n Windows Routing and\n Remote Access Service (RRAS) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62889\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-70354\n .NET Core Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62901\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58641\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62871\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62886\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62909\n .NET Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62872\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-65810\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62897\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7\n No\n No\n RCE\n \n \n CVE-2026-62900\n .NET Information\n Disclosure Vulnerability\n Important\n 5.9\n No\n No\n Info\n \n \n CVE-2026-62902\n .NET Information\n Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62899\n .NET Security Feature\n Bypass Vulnerability\n Important\n 5.9\n No\n No\n SFB\n \n \n CVE-2026-65777\n Active Directory\n Security Feature Bypass Vulnerability\n Important\n 5.3\n No\n No\n SFB\n \n \n CVE-2026-59130\n AMD Zen Information\n Disclosure Vulnerability\n Important\n 5.6\n No\n No\n Info\n \n \n CVE-2026-59131\n AMD Zen Information\n Disclosure Vulnerability\n Important\n 5.6\n No\n No\n Info\n \n \n CVE-2026-62898\n Microsoft QUIC Information Disclosure\n Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-61357\n Application\n Information Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70340\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-65806\n Azure CycleCloud\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-47299\n Azure Monitor Agent\n Elevation of Privilege Vulnerability\n Important\n 7.2\n No\n No\n EoP\n \n \n CVE-2026-57104\n Azure Storage Explorer\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-62892\n Capability Access\n Management Service (camsvc) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65675\n CoPilot Chat Security\n Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-65786\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65787\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65788\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-70335\n GitHub Copilot and\n Visual Studio Code Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-64906\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64908\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64912\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64914\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64919\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64920\n Microsoft Access\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-59136\n Microsoft COM for\n Windows Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54123\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62698\n Microsoft Digest\n Authentication Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-66301\n Microsoft Dynamics 365\n (On-Premises) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65815\n Microsoft Dynamics 365\n On-Premises Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-40375\n Microsoft Dynamics\n Business Central Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65673\n Microsoft Entra\n Connect Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-68797\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68799\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68802\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68808\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68813\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70318\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70327\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-70328\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65807\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68793\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68795\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68796\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68798\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68800\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68801\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68803\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68805\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68806\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68807\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68810\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68811\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68812\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68814\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68815\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-68817\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-62912\n Microsoft Exchange\n Server Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-62910\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.2\n No\n No\n EoP\n \n \n CVE-2026-65813\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-62913\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62915\n Microsoft Exchange\n Server Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-62914\n Microsoft Exchange\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-59133\n Microsoft High\n Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-59124\n Microsoft High\n Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-62784\n Microsoft Local\n Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68792\n Microsoft Office\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62842\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63517\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66809\n Microsoft Office\n Graphics Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63524\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63529\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-64899\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70314\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70315\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70317\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70323\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63533\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64904\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65656\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65661\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57105\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-70306\n Microsoft Office\n SharePoint Spoofing Vulnerability\n Important\n 9.3\n No\n No\n Spoofing\n \n \n CVE-2026-63521\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63528\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63530\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63531\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-64917\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66806\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-66810\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70319\n Microsoft Office Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-63527\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64905\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-64915\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70311\n Microsoft Office Word\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-65680\n Microsoft OneDrive for\n MacOS Elevation of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70329\n Microsoft Outlook\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62882\n Microsoft Outlook\n Spoofing Vulnerability\n Important\n 4.3\n No\n No\n Spoofing\n \n \n CVE-2026-70313\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-70337\n Microsoft PowerShell\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70338\n Microsoft PowerShell\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-59138\n Microsoft Remote\n Registry Service Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-61345\n Microsoft Remote\n Registry Service Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-70324\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-70321\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70326\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-70355\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-62837\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-63514\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-63520\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-64901\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65658\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-65663\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66805\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66808\n Microsoft SharePoint\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58639\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-62829\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-62839\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-62917\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-63516\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-64897\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64900\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64902\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64916\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-64922\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-65660\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-63512\n Microsoft SharePoint\n Server Tampering Vulnerability\n Important\n 6.5\n No\n No\n Tampering\n \n \n CVE-2026-65767\n Microsoft Teams for\n Android and iOS Spoofing Vulnerability\n Important\n 8.8\n No\n No\n Spoofing\n \n \n CVE-2026-65769\n Microsoft Teams iOS\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65768\n Microsoft Teams Remote\n Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-66804\n Microsoft Windows\n Cross Device Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59135\n Microsoft Windows\n Search Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65814\n Microsoft Windows\n Storage Port Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70310\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58651\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-6726 *\n MITRE: CVE-2026-6726\n TPM 2.0 Improper Object Slot Reuse\n Important\n 7.9\n No\n No\n \n \n \n CVE-2026-6727 *\n MITRE: CVE-2026-6727\n TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n Important\n 5.9\n No\n No\n \n \n \n CVE-2026-65811\n Power BI Remote Code\n Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-68809\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70312\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70316\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70320\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70322\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70325\n Powerpoint Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59119\n PowerShell Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-58612\n PowerShell Information\n Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-65671\n Remote Access API\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65672\n Remote Access API\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-42976\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59134\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61352\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61363\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-54113\n Remote Procedure Call\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-62781\n RPC Runtime Library\n Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-59125\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-47285\n Visual Studio Code\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54981\n Visual Studio Code\n Python Extension Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-59113\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-69320\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-70336\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58650\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-69278\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-69306\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-62743\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62746\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62786\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62798\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61358\n Windows Accessibility\n Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49179\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-61348\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-70307\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65778\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65779\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65780\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65781\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65782\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65783\n Windows Autopilot\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62908\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61927\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61934\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62705\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62722\n Windows Bind Filter\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62713\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62771\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62728\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62772\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62775\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-72971\n Windows Container Isolation FS Filter Driver\n (unionfs.sys) Tampering Vulnerability\n Important\n 5.5\n No\n No\n Tampering\n \n \n CVE-2026-61936\n Windows Defender\n Firewall Service Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-62710\n Windows Device\n Association Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62747\n Windows Device\n Association Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65785\n Windows DHCP Client\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-62736\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62755\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61361\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Important\n 7\n No\n No\n RCE\n \n \n CVE-2026-62761\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62776\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62803\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62807\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62812\n Windows DHCP Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62714\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62715\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62716\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62718\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62720\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62742\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62745\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62814\n Windows DHCP Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61923\n Windows Display\n Enhancement Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62769\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-62778\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-62881\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-62883\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65795\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65797\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65798\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-65799\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70304\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-70330\n Windows DNS Elevation\n of Privilege Vulnerability\n Important\n 6.7\n No\n No\n EoP\n \n \n CVE-2026-61920\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.6\n No\n No\n RCE\n \n \n CVE-2026-62787\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-61932\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62888\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62894\n Windows DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61933\n Windows DWM Core\n Library Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62703\n Windows DWM Core\n Library Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59128\n Windows Encrypting\n File System (EFS) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-59126\n Windows Event Logging\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-59137\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61347\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61360\n Windows GDI\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65662\n Windows GDI\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62709\n Windows GDI+\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62702\n Windows Graphics\n Kernel Denial of Service Vulnerability\n Important\n 6.8\n No\n No\n DoS\n \n \n CVE-2026-61346\n Windows Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62774\n Windows Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61928\n Windows Hello\n Tampering Vulnerability\n Important\n 5.5\n No\n No\n Tampering\n \n \n CVE-2026-62750\n Windows HTTP Protocol\n Stack Tampering Vulnerability\n Important\n 6.5\n No\n No\n Tampering\n \n \n CVE-2026-61937\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62735\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62739\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62741\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62753\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62811\n Windows HTTP.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61368\n Windows Hyper-V\n Information Disclosure Vulnerability\n Important\n 5\n No\n No\n Info\n \n \n CVE-2026-62740\n Windows Imaging\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54984\n Windows Imaging\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-59127\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61925\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61938\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62768\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65774\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70344\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70345\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70346\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-70347\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65681\n Windows iSCSI Target\n Service Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-65796\n Windows iSCSI Target\n Service Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-65679\n Windows iSCSI Target\n Service Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-62752\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62754\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62766\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62773\n Windows Kerberos\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61929\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61930\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62708\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-62737\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62749\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62780\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62788\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65773\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62785\n Windows LDAP -\n Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62795\n Windows LDAP -\n Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62777\n Windows License\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50472\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62738\n Windows Management\n Instrumentation Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-70348\n Windows Management\n Services Denial of Service Vulnerability\n Important\n 5.5\n No\n No\n DoS\n \n \n CVE-2026-62717\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62719\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65790\n Windows Message\n Queuing Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62688\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62693\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62707\n Windows Modern Device\n Management (MDM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56174\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61366\n Windows Network\n Connection Broker Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-68819\n Windows Network File\n System Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-62700\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62797\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62880\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61350\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-62793\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62796\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-62887\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-65784\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-68821\n Windows Package\n Manager Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-62696\n Windows Program\n Compatibility Assistant Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62751\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62690\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62758\n Windows Remote Access\n Connection Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62783\n Windows Remote Access\n Connection Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61918\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61921\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61924\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-61356\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61364\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61365\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61367\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62692\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62779\n Windows Schannel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62757\n Windows Schannel\n Security Feature Bypass Vulnerability\n Important\n 5.3\n No\n No\n SFB\n \n \n CVE-2026-61355\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62770\n Windows Shell\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62799\n Windows SMB Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62782\n Windows SMB Client\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-65794\n Windows SMB Client\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-62790\n Windows SMBv3 Server\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-62800\n Windows SMBv3 Server\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-61359\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62695\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-59132\n Windows TCP/IP Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-62792\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-59122\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-61353\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62701\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62723\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62724\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62725\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62726\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62729\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62732\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62734\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62748\n Windows Telephony\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62699\n Windows Universal Disk\n Format File System Driver (UDFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-61926\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62721\n Windows User-Mode\n Power Service (UMPS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62711\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62712\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62733\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62876\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62877\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-62885\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65678\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-65775\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-65776\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-62730\n Windows Wired\n AutoConfig Service Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-61349\n Windows Work Folder\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-61939\n Winlogon Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56179\n Windows\n Network Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:41.176686Z"} https://vulnerability.circl.lu/sighting/dd3d8b0d-acc1-4546-9e1c-d74b7ff23dc8/export Tue, 11 Aug 2026 19:00:41 +0000 https://vulnerability.circl.lu/sighting/a42af158-ec82-4030-a04e-41933068037d/export {"uuid": "a42af158-ec82-4030-a04e-41933068037d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117056917271122111", "content": "We have just added an important vulnerability affecting Microsoft Azure SQL Managed Instance (CVE-2026-62836) https://vuldb.com/vuln/386865", "creation_timestamp": "2026-08-07T23:53:29.469583Z"} {"uuid": "a42af158-ec82-4030-a04e-41933068037d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117056917271122111", "content": "We have just added an important vulnerability affecting Microsoft Azure SQL Managed Instance (CVE-2026-62836) https://vuldb.com/vuln/386865", "creation_timestamp": "2026-08-07T23:53:29.469583Z"} https://vulnerability.circl.lu/sighting/a42af158-ec82-4030-a04e-41933068037d/export Fri, 07 Aug 2026 23:53:29 +0000 https://vulnerability.circl.lu/sighting/6910d43c-edde-45b8-a8ae-a438efe98079/export {"uuid": "6910d43c-edde-45b8-a8ae-a438efe98079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjat6atbm2o", "content": "CVE-2026-62836 - azure sql managed instance\nAn attacker can exploit a security weakness in Azure SQL Managed Instance, allowing them to gain elevated network privileges without permission. This could let the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-07T19:06:06.514645Z"} {"uuid": "6910d43c-edde-45b8-a8ae-a438efe98079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjat6atbm2o", "content": "CVE-2026-62836 - azure sql managed instance\nAn attacker can exploit a security weakness in Azure SQL Managed Instance, allowing them to gain elevated network privileges without permission. This could let the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-07T19:06:06.514645Z"} https://vulnerability.circl.lu/sighting/6910d43c-edde-45b8-a8ae-a438efe98079/export Fri, 07 Aug 2026 19:06:06 +0000